system
Describe <CVE-2009-3504>.
user
What is <CVE-2009-3504>?
assistant
SQL injection vulnerability in offers_buy.php in Alibaba Clone 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter..