Description
SQL injection vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to execute arbitrary SQL commands via the q parameter.
References
- 21531 vdb-entry
- ADV-2005-2756 vdb-entry
- http://pridels0.blogspot.com/2005/12/locazolist-classifieds-v103c-vuln.html
- 15812 vdb-entry
- http://locazo.net:81/applications/