3 matches found
CVE-2006-4072
Multiple SQL injection vulnerabilities in Club-Nuke XP 2.0 LCID 2048 allow remote attackers to execute arbitrary SQL commands via the 1 haberid parameter to haberdetay.asp, and allow remote authenticated users to execute arbitrary SQL commands via the 2 menuid parameter to menu.asp...
Sql injection
SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows remote attackers to execute arbitrary SQL commands via the haberid parameter. NOTE: this product has also been referred to as "Cilem News," although that does not appear to be the proper name...
CVE-2006-0961: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows remote attackers to execute arbitrary SQL commands via the haberid parameter. NOTE: this product has also been referred to as "Cilem News," although that does not appear to be the proper name...