TI-2009-02029 CVE-2009-2122 · GHSA-hvxg-4q3q-rp48SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0…Priority LOW 38SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02737 · Published 2009-06-19 · No fix listed CWE-89