SQL injection vulnerability in newsdetail.asp in Enthrallweb eMates 1.0 allows remote malicious users to execute arbitrary SQL commands via the ID parameter.
enthrallweb emates 1.0