CVE-2006-6031: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Greater Cincinnati Internet Solutions GCIS ASPCart allow remote attackers to execute arbitrary SQL commands via 1 the prodid parameter in a prodetails.asp; 2 the page parameter in b display.asp; the 3 custid, 4 item, 5 price, 6 custom, 7 department, 8...