high7.5Public exploit code
CVE-2011-5111
Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via the hal parameter to (1…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Balitbang CMS 3.3 - 'alumni.php?hal' SQL Injection2011-11-24 · webapps · php · Verified
- Balitbang CMS 3.3 - 'index.php?hal' SQL Injection2011-11-24 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via the hal parameter to (1) the data module in alumni.php; or the (2) lih_buku, (3) artikel, (4) album, or (5) berita module in index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kajianwebsite | Cms Balitbang | Version 3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/files/view/107254/cmsbalitbang-sql.txt
- http://www.securityfocus.com/bid/50797
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71466
- http://packetstormsecurity.org/files/view/107254/cmsbalitbang-sql.txt
- http://www.securityfocus.com/bid/50797
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71466