CVE-2009-3754

CVE-2009-3754 affects phpBMS 0.96, with multiple SQL injection vulnerabilities. The flaws allow remote attackers to craft input to three endpoints—modules/bms/invoices_discount_ajax.php (id parameter), dbgraphic.php (f parameter), and advancedsearch.php (tid parameter in a show action)—to execute...

CVE-2009-3754

creationtimestamp| type| source ---|---|--- 2009-07-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9101...