CVE-2009-2933

Publication date 21 August 2009

Last updated 24 July 2024

Ubuntu priority

Description

SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the items_number parameter.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
piwigo	10.10 maverick	Not affected
	10.04 LTS lucid	Not in release
	9.10 karmic	Not in release
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Not in release

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.cve.org/CVERecord?id=CVE-2009-2933