CVE-2009-2895

CVE-2009-2895 is a SQL injection in rss.php of Ultimate Regnow Affiliate (URA) 3.0 exposed via the cat parameter. Remote attackers could cause arbitrary SQL execution. Affects URA 3.0; CVSS v2 base score 7.5 (HIGH). Exploit reference exists (Exploit-DB 9263). No remediation details provided in th...