CVE:CVE-2006-6152
CNNVD:CNNVD-200611-468
vSpin.net Classified System 2004中存在多个SQL注入漏洞，远程攻击者可以通过传给(a)cat.asp的(1)cat参数，或者传给(b)search.asp的(2)keyword，(3)order，(4)sort，(5)menuSelect或(6)state参数来执行任意SQL命令。
solution:Upgrade vspin.net classified_system to a higher version than 2004,and avoid the version 2004