CVE-2008-5923
SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL commands the cat parameter.
Date published : 2009-01-21
http://www.securityfocus.com/bid/32809
http://packetstormsecurity.org/0812-exploits/aspdevxmdiary-sqldisclose.txt