CVE-2009-2933
SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the items_number parameter.
Date published : 2009-08-21
http://www.securityfocus.com/archive/1/505801/100/0/threaded