CVE-2006-5023

The CVE-2006-5023 entry describes an SQL injection in the web application xweblog (versions 2.1 and earlier) via the kategori parameter in kategori.asp. The underlying issue is likely unsafely embedded SQL where user-supplied input is not properly sanitized before being included in a query, enabl...