CVE-2006-6337 – Aspee Ziyaretci Defteri - 'giris.asp' Multiple Field SQL Injections

https://notcve.org/view.php?id=CVE-2006-6337

Multiple SQL injection vulnerabilities in giris.asp in Aspee and Dogantepe Ziyaretci Defteri allow remote attackers to execute arbitrary SQL commands via the (1) kullanici or (2) parola parameter. Múltiples vulnerabilidades de inyección SQL en giris.asp de Aspee y Dogantepe Ziyaretci Defteri permiten a atacantes remotos ejecutar comandos SQL de su elección mediante los parámetros (1) kullanici y (2) parola. • https://www.exploit-db.com/exploits/29216 http://secunia.com/advisories/23291 http://www.securityfocus.com/archive/1/453234/100/0/threaded http://www.securityfocus.com/archive/1/454589/100/0/threaded http://www.securityfocus.com/bid/21398 http://www.securityfocus.com/bid/21627 http://www.vupen.com/english/advisories/2006/4825 https://exchange.xforce.ibmcloud.com/vulnerabilities/30919 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •