Sql injection

Multiple SQL injection vulnerabilities in doITLive CMS 2.50 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter in an USUB action to default.asp and the 2 LicenceSpecialLicenseNumber aka LicenceId cookie to edit/default.asp...