Unscored CVE-2007-3178 EUVD-2007-3170GHSA-3jc5-hhm5-7cxf

Multiple SQL injection vulnerabilities in Zindizayn Okul Web Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (…

Published Jun 11, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple SQL injection vulnerabilities in Zindizayn Okul Web Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) pass parameter to (a) mezungiris.asp or (b) ogretmenkontrol.asp.

References

2798 third-party-advisory
38348 vdb-entry
20070526 Zindizayn Okul Web Sistemi v1.0 Sql VulnZ. mailing-list
okulwebsistemi-mezungiris-sql-injection(34559) vdb-entry
38349 vdb-entry
24174 vdb-entry