Aspmforum [ multiples injection sql (get&post)]

vendor site:http://www.kervancilar.com/ product:Aspmforum bug:injection sql get & post risk:high injection sql get : /forum.asp?baslik='sql /forum2.asp?baslik=2&soruid='sql /kullanicilistesi.asp?ak=&at=&harf='sql /kullanicilistesi.asp?at=baslayan&ak='sql once logged :...