SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote malicious users to execute arbitrary SQL commands via the ID parameter.
site2nite boat classifieds