CVE-2006-4882
SQL injection vulnerability in Review.asp in Julian Roberts Charon Cart 3 allows remote attackers to execute arbitrary SQL commands via the ProductID parameter.
Date published : 2006-09-19
http://www.securityfocus.com/bid/20083
http://www.securityfocus.com/archive/1/446254/100/0/threaded