← back
CVE-2006-0961

CVE-2006-0961

EPSS 2.2%
SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows remote attackers to execute arbitrary SQL commands via the haber_id parameter. NOTE: this product has also been referred to as "Cilem News," although that does not appear to be the proper name.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/1562unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/bugtraq/2006-02/0449.htmlhttp://marc.info/?l=full-disclosure&m=114079912721723&w=2http://secunia.com/advisories/19157http://securitytracker.com/id?1015677https://exchange.xforce.ibmcloud.com/vulnerabilities/24920https://www.exploit-db.com/exploits/1562http://www.nukedx.com/?viewdoc=10http://www.osvdb.org/23618http://www.securityfocus.com/bid/16813http://www.vupen.com/english/advisories/2006/0881