CVE:CVE-2007-0129
CNNVD:CNNVD-200701-098
LocazoList 2.01a beta5及之前版本的main.asp中存在SQL注入漏洞。远程攻击者可以借助subcatID参数，执行任意的SQL指令。
solution:Upgrade locazo locazolist_classifieds to a higher version than 2.01a_beta5,and avoid the version (,2.01a_beta5]