system
Describe <CVE-2009-3505>.
user
What is <CVE-2009-3505>?
assistant
SQL injection vulnerability in view_news.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter.  NOTE: the game_id vector is already covered by CVE-2008-4460..