CVE-2007-3990

CVE-2007-3990 describes an SQL injection vulnerability in Dora Emlak 1.0, triggered when goster is set to emlakdetay and an arbitrary id parameter is supplied to default.asp. The root cause is unsafely constructed SQL queries, allowing remote attackers to execute arbitrary SQL commands. No exploi...