CVE-2007-5704 Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the (1) Email Address and (2) Password fields....
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the (1) Email Address and (2) Password fields in (a) login.asp and (b) admin_login.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| codewidgets online event registration template | All versions | No fix listed |
References
- 27375 third-party-advisory vendor-advisory
- 3313 third-party-advisory
- 38167 vdb-entry
- 38168 vdb-entry
- 20071023 [Aria-Security.Net] CodeWidgets.Com Online Event Registration Multiple login SQL Injection mailing-list
- 26192 vdb-entry
- eventregistration-login-sql-injection(37424) vdb-entry