CVE-2005-4509

CVE-2005-4509 describes an SQL injection in index.asp for pTools, exploitable via the docID parameter to allow remote execution of arbitrary SQL commands. Affected software is pTools; vulnerability arises from improper handling of input in the docID field. Impact, as stated, includes partial conf...