Unknown · Oto Galeri Sistemi · CVE-2010-4615
**Name of the Vulnerable Software and Affected Versions**
Oto Galeri Sistemi version 1.0
**Description**
The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the `arac` parameter to "carsdetail.asp" and the `marka` parameter to "twohandscars.asp".
**Recommendations**
For Oto Galeri Sistemi version 1.0, consider restricting access to the "carsdetail.asp" and "twohandscars.asp" pages until a patch is available. As a temporary workaround, avoid using the `arac` and `marka` parameters in the affected API endpoints.