system
Describe <CVE-2009-3125>.
user
What is <CVE-2009-3125>?
assistant
SQL injection vulnerability in the Bug.search WebService function in Bugzilla 3.3.2 through 3.4.1, and 3.5, allows remote attackers to execute arbitrary SQL commands via unspecified parameters..