CVE-2006-6298

CVE-2006-6298 describes a SQL injection vulnerability in the web application component uye_giris_islem.asp of Metyus Okul Yonetim Sistemi 1.0. The vulnerability allows remote attackers to execute arbitrary SQL commands via the (1) kullanici_ismi and (2) sifre parameters, potentially compromising ...