TI-2009-03090 CVE-2009-3246 · GHSA-wgjj-998f-xhjvSQL injection vulnerability in spnews.php in MyBuxScript PTC-BUX allows remote attackers…Priority LOW 35SQL injection vulnerability in spnews.php in MyBuxScript PTC-BUX allows remote attackers to execute arbitrary SQL commands via the id parameter in an spnews action to the default URI.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.00993 · Published 2009-09-18 · No fix listed CWE-89