high7.5Public exploit code
CVE-2006-6298
SQL injection vulnerability in uye_giris_islem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) kul…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Metyus Okul Yonetim 1.0 - 'Sistemi Uye_giris_islem.asp' SQL Injection2006-12-04 · webapps · asp · Verified
Impact
SQL injection vulnerability in uye_giris_islem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) kullanici_ismi and (2) sifre parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Maxiasp | Yonetimi | Version 1.0 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/1971
- http://www.securityfocus.com/archive/1/453419/100/0/threaded
- http://www.securityfocus.com/bid/21418
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30705
- http://securityreason.com/securityalert/1971
- http://www.securityfocus.com/archive/1/453419/100/0/threaded
- http://www.securityfocus.com/bid/21418
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30705