CVE-2008-5605: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the 1 ItemID parameter to classifieds.asp and the 2 ID parameter to Events.asp...