CVE-2006-6337 Information

Description

Multiple SQL injection vulnerabilities in giris.asp in Aspee and Dogantepe Ziyaretci Defteri allow remote attackers to execute arbitrary SQL commands via the (1) kullanici or (2) parola parameter.

Reference

http://secunia.com/advisories/23291 http://www.securityfocus.com/archive/1/453234/100/0/threaded http://www.securityfocus.com/archive/1/454589/100/0/threaded http://www.securityfocus.com/bid/21398 http://www.securityfocus.com/bid/21627 http://www.vupen.com/english/advisories/2006/4825 https://exchange.xforce.ibmcloud.com/vulnerabilities/30919