SQL injection vulnerability in problist.asp in NetSupport DNA HelpDesk 1.01 allows remote attackers to execute arbitrary SQL commands via the where parameter.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/16782http://www.securiteam.com/windowsntfocus/5PP0L0ADGE.htmlhttp://secunia.com/advisories/12119http://www.osvdb.org/8169http://www.securityfocus.com/bid/10772