Unscored CVE-2009-3319 EUVD-2009-3301GHSA-q26p-2pjc-36qx

SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id …

Published Sep 23, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sec list action, a different vector than CVE-2006-1018.

References

20090921 Dawaween V 1.03 <<----SQL Injection Exploit mailing-list
16909 vdb-entry