CVE-2008-6075

CVE-2008-6075 describes an SQL injection in Bahar Download Script 2.0, specifically in aspkat.asp, exploitable via the kid parameter to execute arbitrary SQL commands remotely. The PT-2009-1550 entry corroborates the issue for Bahar Download Script 2.0 and notes that remote command execution is p...