CVE-2009-0428

CVE-2009-0428 describes a SQL injection in DMXReady Secure Document Library 1.1 and earlier. The vulnerability is triggered via the cid parameter in CategoryManager/upload_image_category.asp, allowing remote attackers to execute arbitrary SQL commands. The available sources (NVD/NIST) confirm the...