high7.5Public exploit code
CVE-2010-3461
SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the artid parameter in a pri…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- eNdonesia 8.4 - SQL Injection2010-09-15 · webapps · php · Verified
Impact
SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printarticle action to mod.php, a different vector than CVE-2007-3394.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Endonesia | Endonesia | Version 8.4 |