CVE-2006-5217 | BDVDB-2026-19650 Detail

Description#

SQL injection vulnerability in giris_yap.asp in Emek Portal 2.1 allows remote attackers to execute arbitrary SQL commands by simultaneously injecting into the user name and pass fields in uyegiris.asp, also known as the Kullanici Adi (k_a) and Sifre (sifre) parameters.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/29380
http://www.securityfocus.com/archive/1/447914/100/0/threaded
http://securityreason.com/securityalert/1700
http://www.securityfocus.com/bid/20378

Exploit#

No public exploit known

History#

Version 12006-10-09Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.