CVE:CVE-2006-6672
CNNVD:CNNVD-200612-459
Burak Yylmaz Download Portal存在多个SQL注入漏洞，远程攻击者可以通过传给(a)HABERLER.ASP和(b)ASPKAT.ASP的(1)kid或可能的(2)id参数执行任意SQL命令。
solution:Upgrade maxiasp burak_yilmaz_download_portal to a higher version than 0,and avoid the version 0