SQL injection vulnerability in search.asp in CreaScripts Creadirectory allows remote attackers to execute arbitrary SQL commands via the category parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Creadirectory | Creascripts | 1.2 (including) | 1.2 (including) |