CVE-2006-6804: Undefined Security Weakness

SQL injection vulnerability in busdetails.asp in Dragon Business Directory - Pro aka Dragon Internet Business Search Directory - Pro 3.01.12 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Title : Dragon Business Directory <= V3.01.12 (ID) Remote SQL Injection Vulnerability

Title : Dragon Business Directory = V3.01.12 ID Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//busdetails.asp?ID=SQL Example:...