CVE-2009-1256

The vulnerability described for CVE-2009-1256 is a SQL injection in FlexCMS 2.5, exploitable via the ItemId parameter. The affected component is FlexCMS 2.5 (web application), with the root cause being improper handling of ItemId leading to arbitrary SQL commands execution. Reported impact includ...