Lucene search
HistoryMay 21, 2009 - 3:30 p.m.
CVE-2009-1746
cve-2009-1746
sql injection
berita.php
dgnews 3.0 beta
remote attackers
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.0%
SQL injection vulnerability in berita.php in Dian Gemilang DGNews 3.0 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action.
Affected configurations
Node
diangemilangdgnewsMatch3.0_beta
| CPE | Name | Operator | Version |
|---|---|---|---|
| diangemilang:dgnews | diangemilang dgnews | eq | 3.0_beta |
Related
cvelist
cvelist
CVE-2009-1746
2009-05-21 15:00:00
nvd
nvd
CVE-2009-1746
2009-05-21 15:30:01
prion
prion
Sql injection
2009-05-21 15:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.0%
Related for CVE-2009-1746