Security Advisory
CVE-2006-3580
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the order parameter.