CVE-2007-4068

Multiple SQL injection vulnerabilities in Webyapar 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the katid parameter to the default URI in a download action or 2 the id parameter to the default URI in a duyurulardetay action...