← Database

CVE-2009-2927

HIGH CVSS: 7.5 Published: 2009-08-21 Modified: 2026-06-16

Description

SQL injection vulnerability in DetailFile.php in DigitalSpinners DS CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the nFileId parameter.

Affected Platforms

Digitalspinners Ds Cms

Weakness Type

CWE-89

References