CVE-2008-5992

Multiple SQL injection vulnerabilities in Jetik Emlak Sistem A (ESA) 2.0 allow remote attackers to execute arbitrary SQL commands via the KayitNo parameter to (1) diger.php and (2) sayfalar.php.
Configurations

Configuration 1 (hide)

cpe:2.3:a:jetik:jetik_emlak_sistem_a:2.0:*:*:*:*:*:*:*

History

21 Nov 2024, 00:55

Type Values Removed Values Added
References () http://secunia.com/advisories/32008 - () http://secunia.com/advisories/32008 -
References () http://www.securityfocus.com/bid/31352 - Exploit () http://www.securityfocus.com/bid/31352 - Exploit
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/45391 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/45391 -
References () https://www.exploit-db.com/exploits/6549 - () https://www.exploit-db.com/exploits/6549 -

Information

Published : 2009-01-28 15:30

Updated : 2025-04-09 00:30


NVD link : CVE-2008-5992

Mitre link : CVE-2008-5992

CVE.ORG link : CVE-2008-5992


JSON object : View

Products Affected

jetik

  • jetik_emlak_sistem_a
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')