Moving-2 0 0 6 SP4 exploit-vulnerability warning-the black bar safety net

Today BCT to move-SP4 vulnerabilities published, since published, it is still sent to it! In NewComment. asp file ModuleName = Trimrequest"ModuleName" The ModuleName variable is not filtered well, which leads to, we can be the following SQL statement to construct our The SQL statement If ModuleNa...