CVE:CVE-2008-5992
CNNVD:CNNVD-200901-394
Jetik Emlak Sistem A (ESA) 2.0版本存在多个SQL注入漏洞。远程攻击者可以借助对(1)diger.php 和 (2)sayfalar.php 的KayitNo参数,执行任意的SQL指令。
solution:Upgrade jetik jetik_emlak_sistem_a to a higher version than 2.0,and avoid the version 2.0