CVE-2009-5091

The CVE-2009-5091 entry concerns a SQL injection in the Vlinks Web app (versions 1.0.3 and 1.1.6) affecting page.php via the id parameter. This allows remote attackers to execute arbitrary SQL commands. The CVSS data indicates a High base score (7.5) with network attack vector and low complexity,...