← Database

CVE-2007-4068

MEDIUM CVSS: 5.8 Published: 2007-07-30 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in Webyapar 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the kat_id parameter to the default URI in a download action or (2) the id parameter to the default URI in a duyurular_detay action.

Affected Platforms

Webyapar Webyapar

Weakness Type

NVD-CWE-Other

References