Copperleaf Photolog <= 0.16- SQL injection
criticalSQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attackers to execute arbitrary SQL commands via the postid parameter.
- CVSS:
- 9.8
- Affected:
- up to 0.16
- Fix:
- No patched version reported
- Disclosed:
- Feb 15, 2010