CVE-2009-4456

CVE-2009-4456 describes an SQL injection in Green Desktiny 2.3.1 (and possibly earlier) via the id parameter in news_detail.php. The vulnerability arises in the affected script’s handling of the id input, enabling remote attackers to execute arbitrary SQL commands. Affected product: Green Desktin...