CVE-2007-4119 in Defteri
Summary
Multiple SQL injection vulnerabilities in yonetici.asp in Berthanas Ziyaretci Defteri 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) Pass fields.
VulDB is the best source for vulnerability data and more expert information about this specific topic.