Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via the (1) artid parameter to mod.php in a viewarticle action (publisher mod) and the (2) bid parameter to banners.php in a click action. NOTE: the mod.php viewdisk and viewlink vectors are already covered by CVE-2006-6873.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Endonesia | Endonesia | 8.4 (including) | 8.4 (including) |