Php Ipnmonitor · Php-Ipnmonitor · CVE-2009-3361
**Name of the Vulnerable Software and Affected Versions**
PHP-IPNMonitor (affected versions not specified)
**Description**
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `maincat id` parameter in the "index.php" file.
**Recommendations**
For PHP-IPNMonitor, consider restricting access to the `maincat id` parameter in the "index.php" file to minimize the risk of exploitation. As a temporary workaround, avoid using the `maincat id` parameter until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.