CVE-2007-5704

Description

Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the (1) Email Address and (2) Password fields in (a) login.asp and (b) admin_login.asp.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/37424

http://www.securityfocus.com/bid/26192

http://www.securityfocus.com/archive/1/482730/100/0/threaded

http://www.osvdb.org/38168

http://www.osvdb.org/38167

http://securityreason.com/securityalert/3313

http://secunia.com/advisories/27375

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS