CVE-2006-6337

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-12-07 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in giris.asp in Aspee and Dogantepe Ziyaretci Defteri allow remote attackers to execute arbitrary SQL commands via the (1) kullanici or (2) parola parameter.

Affected products

Aspindir Aspee Ziyaretci Defteri: all versions

References

http://secunia.com/advisories/23291
http://www.securityfocus.com/archive/1/453234/100/0/threaded
http://www.securityfocus.com/archive/1/454589/100/0/threaded
http://www.securityfocus.com/bid/21398
http://www.securityfocus.com/bid/21627
http://www.vupen.com/english/advisories/2006/4825
https://exchange.xforce.ibmcloud.com/vulnerabilities/30919
http://secunia.com/advisories/23291
http://www.securityfocus.com/archive/1/453234/100/0/threaded
http://www.securityfocus.com/archive/1/454589/100/0/threaded
http://www.securityfocus.com/bid/21398
http://www.securityfocus.com/bid/21627

Get alerted when CVE-2006-6337 or the next vulnerability affects your stack