← Database

CVE-2007-5220

HIGH CVSS: 7.5 Published: 2007-10-05 Modified: 2026-06-16

Description

SQL injection vulnerability in catalog.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter and possibly other parameters.

Affected Platforms

Asp Product Catalog Asp Product Catalog

Weakness Type

CWE-89

References