cpe:/a:demarque:typing_pal:1.0 CVE-2009-4860 2010-05-11T08:02:09.157-04:00 2017-09-18T21:30:06.110-04:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2010-05-11T08:56:00.000-04:00 EXPLOIT-DB 9390 SQL injection vulnerability in demo.php in Typing Pal 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idTableProduit parameter.