CVE-2005-3953

Bedeng PSP 1.1 is affected by an SQL injection via user-supplied input to index.php, download.php (parameter cwhere) and baca.php (parameter ckode). Root cause: improper handling of input enables arbitrary SQL execution by remote attackers. Impact: information exposed or modified data; scale/gene...

CVE-2005-3953

SQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL commands via the cwhere parameter to 1 index.php and 2 download.php, or 3 ckode parameter to baca.php...