PT-2012-2089

Name of the Vulnerable Software and Affected Versions Kajian Website CMS Balitbang version 3.x Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the hal parameter to various modules, including the data module in alumni.php, and the lih buku,...

CVE-2011-5111: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via the hal parameter to 1 the data module in alumni.php; or the 2 lihbuku, 3 artikel, 4 album, or 5 berita module in index.php...

Balitbang CMS 3.3 - alumni.php?hal SQL Injection

Balitbang CMS 3.3 - alumni.php?hal SQL Injection source: https://www.securityfocus.com/bid/50797/info CMS Balitbang is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...