CVE-2011-5111
Kajian Website CMS Balitbang 3.x - SQL Injection via Hal Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-5111. PoCs published by X-Cisadane.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in CMS Balitbang, where the 'id' and 'hal' parameters in the URL are not properly sanitized. This allows an attacker to inject malicious SQL queries, potentially compromising the application or underlying database.
Description
Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via the hal parameter to (1) the data module in alumni.php; or the (2) lih_buku, (3) artikel, (4) album, or (5) berita module in index.php.
Exploits (2)
The provided text describes a SQL injection vulnerability in CMS Balitbang, where the 'id' and 'hal' parameters in the URL are not properly sanitized. This allows an attacker to inject malicious SQL queries, potentially compromising the application or underlying database.
The provided text describes a SQL injection vulnerability in CMS Balitbang, where user-supplied input is not properly sanitized in the 'alumni.php' script. The example URL demonstrates how an attacker could inject malicious SQL queries via the 'id', 'tahun', and 'hal' parameters.