system
Describe <CVE-2009-3208>.
user
What is <CVE-2009-3208>?
assistant
Multiple SQL injection vulnerabilities in phpfreeBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to permalink.php and (2) year parameter to index.php..