SQL Injection in Endonesia

CVE-2010-3461

SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printarticle action to mod.php, a different vector than CVE-2007-3394.

Vulnerability class: SQL Injection

EPSS: 0.009 (56.3th percentile) — read the EPSS interpretation.

Affected products

  • Endonesia — versions 8.4
  • N/a — versions n/a

Weakness classification (CWE)

References