CVE-2009-3246

The CVE-2009-3246 entry corresponds to an SQL injection vulnerability in spnews.php of MyBuxScript PTC-BUX, exploitable remotely via the id parameter in an spnews action to the default URI. The connected NVD entry provides a base score of 7.5 (HIGH) with network attack vector and low complexity, ...