Description SQL injection vulnerability in RunScript.asp iCMS allows remote attackers to execute arbitrary SQL commands via the Event_ID parameter. References 18085 third-party-advisory 21810 vdb-entry