Whether you're in need of a simple file-sharing solution or a solution for a standard nation-wide remote access solution, we can determine the solution best meets your needs, and implement it. | Dragon Internet Events Listing venue_detail.asp VenueID Variable SQL Injection |
| Thursday, 16 November 2006 | |
|
Events Listing contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'venue_detail.asp' script not properly sanitizing user-supplied input to the 'VenueID' variable. This may allow an attacker to inject or manipulate SQL queries in the backend database. Read more... |