CVE-2007-4106

SQL injection vulnerability in login.asp in CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Interface allows remote attackers to execute arbitrary SQL commands via the Password parameter.

Link	Resource
http://outlaw.aria-security.info/?p=10
http://www.securityfocus.com/bid/25114
http://secunia.com/advisories/26275	Vendor Advisory
http://securityreason.com/securityalert/2950
https://exchange.xforce.ibmcloud.com/vulnerabilities/35665
http://www.securityfocus.com/archive/1/474935/100/0/threaded

Configuration 1

cpe:2.3:a:codewidgets:punch_card:*:*:*:*:*:*:*:* cpe:2.3:a:codewidgets:pay_roll_-_time_sheet:*:*:*:*:*:*:*:*

---

Published : 2007-07-31 10:17

Updated : 2018-10-15 09:33

---

NVD link : CVE-2007-4106

Mitre link : CVE-2007-4106

No products.

NVD-CWE-Other