CVE-2005-1224: Undefined Security Weakness

Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL commands via the 1 nChannel parameter to default.asp, cat.asp, or detail.asp, 2 the iChannel parameter to search.asp, default.asp, result.asp, cat.asp, or detail.asp 3 the iCat...