Description
Multiple SQL injection vulnerabilities in index.asp in Ultimate Survey Pro allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) did parameter.
References
- 20061124 [Aria-Security Team] Ultimate Survey Pro SQL Injection mailing-list
- http://www.aria-security.com/forum/showthread.php?t=38
- ADV-2006-4706 vdb-entry
- ultimatesurveypro-index-sql-injection(30499) vdb-entry
- 1936 third-party-advisory