CVE-2008-4573 – MunzurSoft Wep Portal W3 - 'kat' SQL Injection

https://notcve.org/view.php?id=CVE-2008-4573

SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL commands via the kat parameter. Vulnerabilidad de inyección SQL en kategori.asp de MunzurSoft Wep Portal W3 permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro kat. • https://www.exploit-db.com/exploits/6725 http://secunia.com/advisories/32238 http://securityreason.com/securityalert/4420 http://www.securityfocus.com/bid/31713 https://exchange.xforce.ibmcloud.com/vulnerabilities/45817 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •