CVE-2009-1746

CVE-2009-1746 describes an SQL injection in Dian Gemilang DGNews 3.0 Beta, via the id parameter in berita.php’s detail action, enabling remote arbitrary SQL execution. The underlying issue is a vulnerability in berita.php allowing attacker-controlled input to alter SQL queries. Affected product/v...