Iyzi · Iyzi Forum · CVE-2006-5054
**Name of the Vulnerable Software and Affected Versions**
iyzi Forum versions 1 Beta 2 and earlier
**Description**
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `uye nu` parameter in the uye/uye ayrinti.asp file.
**Recommendations**
For iyzi Forum versions 1 Beta 2 and earlier, consider restricting access to the uye/uye ayrinti.asp file until a patch is available. As a temporary workaround, avoid using the `uye nu` parameter in the affected file to minimize the risk of exploitation.