CVE-2006-0184: Undefined Security Weakness

Multiple SQL injection vulnerabilities in AspTopSites allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to goto.asp or 2 password parameter to includeloginuser.asp...