CVE-2009-3501

SQL injection vulnerability in students.php in BPowerHouse BPStudents 1.0 allows remote attackers to execute arbitrary SQL commands via the test parameter in a preview action...

CVE-2009-3501

CVE-2009-3501 describes an SQL injection in BPStudents 1.0 (BPowersHouse BPStudents) affecting the file students.php, exploited through the test parameter in a preview action. The underlying cause is improper handling of user input allowing arbitrary SQL execution, with potential partial impact o...

CVE-2009-3501: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in students.php in BPowerHouse BPStudents 1.0 allows remote attackers to execute arbitrary SQL commands via the test parameter in a preview action...