Myminibill

DATE	CVE	VULNERABILITY TITLE	RISK
2009-12-04	CVE-2009-4198	SQL Injection vulnerability in Cupidsystems Myminibill SQL injection vulnerability in my_orders.php in MyMiniBill allows remote authenticated users to execute arbitrary SQL commands via the orderid parameter in a status action. network low complexity cupidsystems CWE-89	6.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.