Description (CNA)
Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via the hal parameter to (1) the data module in alumni.php; or the (2) lih_buku, (3) artikel, (4) album, or (5) berita module in index.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/50797
- http://packetstormsecurity.org/files/view/107254/cmsbalitbang-sql.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71466
ADP enrichment
No English description supplied.