CVE-2007-5704

Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the (1) Email Address and (2) Password fields in (a) login.asp and (b) admin_login.asp.

Link	Resource
http://www.securityfocus.com/bid/26192
http://secunia.com/advisories/27375	Vendor Advisory
http://www.osvdb.org/38167
http://www.osvdb.org/38168
http://securityreason.com/securityalert/3313
https://exchange.xforce.ibmcloud.com/vulnerabilities/37424
http://www.securityfocus.com/archive/1/482730/100/0/threaded

Configuration 1

cpe:2.3:a:codewidgets:online_event_registration_template:*:*:*:*:*:*:*:*

---

Published : 2007-10-29 10:46

Updated : 2018-10-15 09:46

---

NVD link : CVE-2007-5704

Mitre link : CVE-2007-5704

No products.

CWE-89