CVE-2007-4068: Webyapar

Medium severity, CVSS 5.8. EPSS: 2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Webyapar 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the kat_id parameter to the default URI in a download action or (2) the id parameter to the default URI in a duyurular_detay action.

Affected products

• Webyapar Webyapar: version 2.0 only

Published 2007-07-30. Last modified 2026-06-16.