CVE-2007-5220

Publication date

2007-10-05 00:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in catalog.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL commands via the cid parameter and possibly other parameters.