CVEvulnerability
CVE-2006-6672
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-12-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in Burak Yylmaz Download Portal allow remote attackers to execute arbitrary SQL commands via the (1) kid or possibly (2) id parameter to (a) HABERLER.ASP and (b) ASPKAT.ASP. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Affected configurations
• maxiasp burak yilmaz download portal 0
References
- http://www.vupen.com/english/advisories/2006/5085 www.vupen.com
- http://www.vupen.com/english/advisories/2006/5085 www.vupen.com