3 matches found
CVE-2008-6075
SQL injection vulnerability in aspkat.asp in Bahar Download Script 2.0 allows remote attackers to execute arbitrary SQL commands via the kid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
PT-2009-1550 · Bahar · Bahar Download Script
Name of the Vulnerable Software and Affected Versions: Bahar Download Script version 2.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the kid parameter in the aspkat.asp file. Recommendations: For Bahar Download Script version 2.0, conside...
CVE-2006-6672
CVE-2006-6672 describes multiple SQL injection vulnerabilities in the Burak Yylmaz Download Portal. The affected components are the application pages HABERLER.ASP and ASPKAT.ASP, with exploitable parameters (1) kid and (2) id. The impact stated is remote attackers can execute arbitrary SQL comman...