CVE-2006-5054

The CVE-2006-5054 entry describes a SQL injection vulnerability in the uye/uye_ayrinti.asp component of iyzi Forum 1 Beta 2 and earlier. An attacker can supply the uye_nu parameter to cause arbitrary SQL execution. The issue is tied to inadequate input handling in that ASP page, enabling remote e...