SQL injection vulnerability in RunScript.asp iCMS allows remote malicious users to execute arbitrary SQL commands via the Event_ID parameter.
icms content management systems icms