CVE-2009-3502

The CVE-2009-3502 entry describes an SQL injection in the PHP script music.php of BPowerHouse BPMusic 1.0. The vulnerability is triggered via the music_id parameter, allowing remote attackers to execute arbitrary SQL commands. The connected documents provide the affected product/version and the i...