SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and previous versions allows remote malicious users to execute arbitrary SQL commands via the subcatID parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
locazo locazolist classifieds |