VYPR

Cilem Haber

by Cilem

CVEs (2)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2006-65360.030.01Dec 14, 2006Cross-site scripting (XSS) vulnerability in hata.asp in Cilem Haber Free Edition allows remote attackers to inject arbitrary web script or HTML via the hata parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2006-09610.030.03Mar 2, 2006SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows remote attackers to execute arbitrary SQL commands via the haber_id parameter. NOTE: this product has also been referred to as "Cilem News," although that does not appear to be the proper name.