Unscored CVE-2007-5220 EUVD-2007-5200GHSA-v468-4wmw-389j

SQL injection vulnerability in catalog.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid par…

Published Oct 5, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in catalog.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter and possibly other parameters.

References

38555 vdb-entry
ADV-2007-3345 vdb-entry
25884 vdb-entry
20070930 ASP Product catalog SQL injection vulnerability mailing-list
3189 third-party-advisory