Description
Multiple SQL injection vulnerabilities in unuttum.asp in SuskunDuygular Uyelik Sistemi 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) kadi or (2) email parameter. NOTE: some of these details are obtained from third party information.
References
- ADV-2007-2720 vdb-entry
- suskunduygular-unuttum-sql-injection(35666) vdb-entry
- 2945 third-party-advisory
- 20070727 SuskunDuygular - Üyelik Sistemi v.1 Sql mailing-list
- 26260 third-party-advisory
- 25108 vdb-entry