CVE-2006-5936

SQL injection vulnerability in dept.asp in SiteXpress E-Commerce System allows remote attackers to execute arbitrary SQL commands via the id parameter.

Date published : 2006-11-15

http://www.securityfocus.com/bid/21059

http://www.securityfocus.com/archive/1/451506/100/0/threaded