CVE-2006-0184

CVE-2006-0184 describes multiple SQL injection vulnerabilities in AspTopSites. The affected components are the web application scripts, specifically the goto.asp (parameter: id) and includeloginuser.asp (parameter: password). The root cause is improper input validation allowing arbitrary SQL exec...