SQL injection vulnerability in shpdetails.asp in SepCity Shopping Mall allows remote malicious users to execute arbitrary SQL commands via the ID parameter.
sepcity shopping mall -