CVE-2006-6181

CVE-2006-6181 refers to multiple SQL injection vulnerabilities in default.asp of ClickTech ClickContact. The issue allows remote attackers to execute arbitrary SQL commands via the (1) AlphaSort, (2) In, and (3) orderby parameters, indicating a failure to sanitize user input in query construction...