Description
SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
References
- http://www.nukedx.com/?getxpl=23
- 17616 vdb-entry
- 19693 third-party-advisory
- aspsitem-haberler-sql-injection(25932) vdb-entry
- ADV-2006-1439 vdb-entry
- 20060419 ASPSitem <= 1.83 Remote SQL Injection Vulnerability mailing-list