CVE-2009-2309

CVE-2009-2309 describes a SQL injection vulnerability in Codice CMS 2, exploitable via the tag parameter in index.php. The underlying issue is an input handling flaw that allows remote attackers to execute arbitrary SQL commands. The vulnerability is documented across multiple sources (NVD and CV...