Unscored CVE-2006-7161 EUVD-2006-7143GHSA-fhw4-v23g-fm4r

SQL injection vulnerability in giris_yap.asp in Hazir Site 2.0 allows remote attackers to bypass authentication via the (1) k_a class or (2…

Published Mar 7, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in giris_yap.asp in Hazir Site 2.0 allows remote attackers to bypass authentication via the (1) k_a class or (2) sifre parameter.

References

20375 vdb-entry
20061006 Hazir Site v2.0 Admin SQL Injection mailing-list
hazir-site-giris-sql-injection(29371) vdb-entry
2374 third-party-advisory