CVE-2007-5220

CVE-2007-5220

EPSS 1.2%

SQL injection vulnerability in catalog.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter and possibly other parameters.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/38555 http://securityreason.com/securityalert/3189 http://www.securityfocus.com/archive/1/481211/100/0/threaded http://www.securityfocus.com/bid/25884 http://www.vupen.com/english/advisories/2007/3345