system
Describe <CVE-2009-3336>.
user
What is <CVE-2009-3336>?
assistant
SQL injection vulnerability in auction_details.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL commands via the auction_id parameter..