Vulnerability Details CVE-2007-5220
SQL injection vulnerability in catalog.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter and possibly other parameters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://osvdb.org/38555
- http://securityreason.com/securityalert/3189
- http://www.securityfocus.com/archive/1/481211/100/0/threaded
- http://www.securityfocus.com/bid/25884
- http://www.vupen.com/english/advisories/2007/3345
- http://osvdb.org/38555
- http://securityreason.com/securityalert/3189
- http://www.securityfocus.com/archive/1/481211/100/0/threaded
- http://www.securityfocus.com/bid/25884
- http://www.vupen.com/english/advisories/2007/3345
Products affected by CVE-2007-5220
-
cpe:2.3:a:asp_product_catalog:asp_product_catalog:1.0