Description
SQL injection vulnerability in search.asp in Online Work Order Suite (OWOS) Lite Edition for ASP 3.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.
References
- ADV-2005-2584 vdb-entry
- 21116 vdb-entry
- http://pridels0.blogspot.com/2005/11/owos-lite-30-sql-inj.html
- 17711 third-party-advisory