CVE-2009-0401

CVE-2009-0401 describes an SQL injection in browsecats.php of E-Php CMS, exploitable by remote attackers via the cid parameter to execute arbitrary SQL. The affected component is the browsecats.php module within E-Php CMS; root cause is improper input handling that allows SQL command injection. I...