system
Describe <CVE-2009-1650>.
user
What is <CVE-2009-1650>?
assistant
Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) albumID, (2) tagID, and (3) photoID parameters to index.html..