CVE-2009-2891

CVE-2009-2891 describes an SQL injection in list.php of PHP Scripts Now Riddles, exploitable via the catid parameter. The underlying issue is improper handling of user-supplied input, enabling remote attackers to execute arbitrary SQL commands. Affected component: list.php within the PHP Scripts ...