Description
SQL injection vulnerability in browse.asp in A+ Store E-Commerce allows remote attackers to execute arbitrary SQL commands via the ParentID parameter.
References
- 21092 vdb-entry
- 1880 third-party-advisory
- 22918 third-party-advisory
- a+store-browse-sql-injection(30283) vdb-entry
- 20061114 A+ Store E-Commerce[ injection sql & xss (post) ] mailing-list
- 30417 vdb-entry