Sql injection

SQL injection vulnerability in search.asp in Hosting Controller 6.1 Hotfix 2.9 allows remote attackers to execute arbitrary SQL commands via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1229

CVE-2006-1229 is a SQL injection vulnerability in the search.asp page of Hosting Controller 6.1 (Hotfix 2.9) that allows remote execution of arbitrary SQL commands via the search parameter. The core issue is an injectable parameter in the search functionality, resulting in partial confidentiality...