← Database

CVE-2006-6524

HIGH CVSS: 7.5 Published: 2006-12-14 Modified: 2026-06-16

Description

SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the Uname (UserName) parameter.

Affected Platforms

Ezhrs Hr Assist

Weakness Type

NVD-CWE-Other

References