CVE-2009-4892

SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 portfoliogenre.php and 2 newsid.php...

CVE-2009-4892

CVE-2009-4892: WEBjump! contains SQL injection in a CMS. Remote attackers can exploit via the id parameter to portfolio_genre.php and news_id.php to execute arbitrary SQL. CVSS v2 base score 7.5 (HIGH). Root cause: insufficient sanitization of user input. Exploitation details are provided in mult...

CVE-2009-4892: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 portfoliogenre.php and 2 newsid.php...