← Database

CVE-2007-0129

HIGH CVSS: 7.5 Published: 2007-01-09 Modified: 2026-06-16

Description

SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatID parameter.

Affected Platforms

Locazo Locazolist Classifieds

Weakness Type

NVD-CWE-Other

References