CVE-2006-6524

CVE-2006-6524 is a SQL injection vulnerability in EzHRS HR Assist prior to or including 1.05, occurring in vdateUsr.asp through the Uname (UserName) parameter. The issue arises from improper handling of user input, allowing remote attackers to execute arbitrary SQL commands. Public references inc...

CVE-2006-6525

CVE-2006-6525 affects EzHRS HR Assist 1.05 and earlier. The vulnerability is an SQL injection in vdateUsr.asp that allows remote attackers to execute arbitrary SQL commands via the password parameter. The connected documents confirm the existence of a remote, unauthenticated impact with potential...