CVE-2009-4892

SQL injection vulnerability in Content Management System WEBjump! allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 portfoliogenre.php and 2 newsid.php...

CVE-2009-4892

CVE-2009-4892: WEBjump! contains SQL injection in a CMS. Remote attackers can exploit via the id parameter to portfolio_genre.php and news_id.php to execute arbitrary SQL. CVSS v2 base score 7.5 (HIGH). Root cause: insufficient sanitization of user input. Exploitation details are provided in mult...