CVE-2008-5707 – ASP Indir Iltaweb Alisveris Sistemi - 'xurunler.asp' SQL Injection

https://notcve.org/view.php?id=CVE-2008-5707

SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL commands via the catno parameter. Vulnerabilidad de inyección SQL en urunler.asp en Iltaweb Alisveris Sistemi permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro catno. • https://www.exploit-db.com/exploits/32485 http://www.securityfocus.com/archive/1/497279/100/0/threaded http://www.securityfocus.com/bid/31740 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •