CVE-2009-4204

Flashlight Free Edition is affected by a remote SQL injection in the read.php handler, exploitable via the id parameter. The issue is described as allowing an attacker to execute arbitrary SQL commands and is associated with the vulnerability entry CVE-2009-4204. Public references (e.g., Exploit-...