system
Describe <CVE-2009-3252>.
user
What is <CVE-2009-3252>?
assistant
Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters..