← Database

CVE-2009-2790

HIGH CVSS: 7.5 Published: 2009-08-17 Modified: 2026-06-16

Description

SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4.

Affected Platforms

Softbizscripts Dating Script

Weakness Type

CWE-89

References