CVE-2005-2221: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Dragonfly Commerce allows remote attackers to modify SQL statements and possibly execute arbitrary SQL commands via the 1 key parameter to dcCategoriesview.asp, 2 dcproductslistClearance.asp, 3 PID parameter to ratings.asp, 4 dcProductsview.asp, 5 start, ...