CVE-2006-0412

CVE-2006-0412 describes an SQL injection vulnerability in CyberShop, specifically within the gencbeyin_web_programlama product. This flaw allows remote, unauthenticated attackers to execute arbitrary SQL commands and bypass authentication by manipulating the username parameter during a login action. With a CVSS score of 7.5, this vulnerability presents a high risk due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code in common frameworks like Metasploit or Nuclei, nor significant community discussion or media coverage, suggesting it has not been widely targeted.