CVE-2008-5992: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Jetik Emlak Sistem A ESA 2.0 allow remote attackers to execute arbitrary SQL commands via the KayitNo parameter to 1 diger.php and 2 sayfalar.php...