Unscored CVE-2007-4108 EUVD-2007-4092GHSA-wh48-jpcr-2cx7

SQL injection vulnerability in sign_in.aspx in WebEvents (Online Event Registration Template) allows remote attackers to execute arbitrary …

Published Jul 31, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in sign_in.aspx in WebEvents (Online Event Registration Template) allows remote attackers to execute arbitrary SQL commands via the Password parameter.

References

2948 third-party-advisory
webevents-signin-sql-injection(35671) vdb-entry
25111 vdb-entry
20070727 WebEvents: Online Event Registration Template Username Fields SQL INJECTION mailing-list
http://outlaw.aria-security.info/?p=10
26252 third-party-advisory
20070728 WebEvents: Online Event Registration Template Username Fields SQL INJECTION mailing-list