2 matches found
Sql injection
SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2009-2776
CVE-2009-2776 is a SQL injection vulnerability affecting Smart ASP Survey’s showresult.asp, exploitable via the catid parameter to execute arbitrary SQL commands remotely. Public records consistently describe the flaw as a SQL injection in showresult.asp, with no additional details on patched ver...