CVE-2009-2790

SQL injection vulnerability in cat_products.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4.

Date published : 2009-08-17

http://www.securityfocus.com/bid/35896

http://packetstormsecurity.org/0907-exploits/softbizdating-sql.txt