CVE-2009-4889 – PHP-Fusion Mod Book Panel - 'bookid' SQL Injection

https://notcve.org/view.php?id=CVE-2009-4889

SQL injection vulnerability in books.php in the Book Panel (book_panel) module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the bookid parameter. Vulnerabilidad de inyección SQL en books.php en el módulo Book Panel (book_panel) de PHP-Fusion permite a los atacantes remotos ejecutar a su elección comandos SQL a través del parámetro bookid. • https://www.exploit-db.com/exploits/8186 http://www.exploit-db.com/exploits/8186 http://www.securityfocus.com/bid/34049 https://exchange.xforce.ibmcloud.com/vulnerabilities/49160 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •