SQL injection vulnerability in Products.asp in NuStore 1.0 allows remote attackers to execute arbitrary SQL commands via the SubCatagoryID parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Nustore | Dynamic_dataworx | 1.0 (including) | 1.0 (including) |