CVE-2010-4737: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropResort parameter...