CVE-2004-2561: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute arbitrary SQL commands via 1 the ISSTECHCENTERLOGIN cookie in search.asp and 2 one or more cookies in DoCustomerOptions.asp...