CVE-2009-4792

BandSite CMS 1.1.4 contains an SQL injection vulnerability in includes/content/member_content.php, exploitable via the memid parameter to members.php, allowing remote execution of arbitrary SQL commands. No remediation details are provided in the supplied documents.