CVE-2006-6095: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands via the 1 articleID parameter to activenewsview.asp or the 2 page parameter to default.asp. NOTE: the activeNewscategories.asp and activeNewscomments.asp vectors are already cover...