CVE-2009-1651

The CVE-2009-1651 entry describes a SQL injection in the 2daybiz Business Community Script, specifically in admin/member_details.php. The vulnerability is exploitable via the mid parameter, allowing remote attackers to execute arbitrary SQL commands. The public references (NVD entry and other sou...

CVE-2009-1651: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/memberdetails.php in 2daybiz Business Community Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...