CVE-2009-3190

CVE-2009-3190 affects PAD Site Scripts 3.6, with multiple SQL injection vulnerabilities exposed via (1) the search parameter to list.php and (2) the cat parameter to rss.php. The underlying issue allows remote attackers to execute arbitrary SQL commands. The CVSSv2 base score is 7.5 (HIGH) with n...