system
Describe <CVE-2009-5090>.
user
What is <CVE-2009-5090>?
assistant
SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter and possibly other unspecified vectors..