CVE-2009-4791

CVE-2009-4791 affects Family Connections (aka FCMS) prior to version 1.8.2, where multiple parameters allow SQL injection: letter (addressbook.php), id (recipes.php), year (register.php), poll_id (home.php), and email (lostpw.php). The underlying issue is unvalidated input used in SQL queries, en...