CVE-2007-5704

Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the (1) Email Address and (2) Password fields in (a) login.asp and (b) admin_login.asp.

Published: Oct 29, 2007
Updated: Apr 13, 2023
CVE: CVE-2007-5704
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
codewidgets / online_event_registration_template	-	-

http://secunia.com/advisories/27375
http://securityreason.com/securityalert/3313
http://www.osvdb.org/38167
http://www.osvdb.org/38168
http://www.securityfocus.com/archive/1/482730/100/0/threaded
http://www.securityfocus.com/bid/26192
https://exchange.xforce.ibmcloud.com/vulnerabilities/37424

Vulnerability Database

CVE-2007-5704