PHPCatalog id Parameter SQL Injection

The remote host appears to be running PHPCatalog, a CGI suite to handle on-line catalogues. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands, which could in turn be used to gain administrative access on the remote host. %NASLMINLEVEL 70300 C Tenable...