CVE-2006-6524
SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the Uname (UserName) parameter.
CVSS 2.0 · 7.5 High
EPSS 1.2%
KEV · Not listed
Vendors
Products