CVE-2009-3501

SQL injection vulnerability in students.php in BPowerHouse BPStudents 1.0 allows remote attackers to execute arbitrary SQL commands via the test parameter in a preview action...

CVE-2009-3501

CVE-2009-3501 describes an SQL injection in BPStudents 1.0 (BPowersHouse BPStudents) affecting the file students.php, exploited through the test parameter in a preview action. The underlying cause is improper handling of user input allowing arbitrary SQL execution, with potential partial impact o...