CVE-2007-0053

ASP SiteWare autoDealer < 2.0 - SQL Injection via detail.asp iPro Parameter

Title source: llm

Exploitation Summary

EIP tracks 2 public exploits for CVE-2007-0053. PoCs published by Sid3^effects, ajann.

AI-analyzed exploit summary This is a writeup describing SQL injection vulnerabilities in AutoDealer software. It provides URLs for exploitation but does not include functional exploit code.

Description

SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the iPro parameter.

Exploits (2)

exploitdb WRITEUP VERIFIED

by Sid3^effects · textwebappsphp

https://www.exploit-db.com/exploits/12462

View Code ZIP pw:eip

This is a writeup describing SQL injection vulnerabilities in AutoDealer software. It provides URLs for exploitation but does not include functional exploit code.

Classification

Writeup 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Theoretical

Target: AutoDealer (versions 1 and 2)

No auth needed

Prerequisites: access to the vulnerable URL

MITRE ATT&CK

T1189 - Drive-by Compromise

devstral-2 · analyzed Feb 16, 2026 Full analysis →

exploitdb WORKING POC VERIFIED

by ajann · textwebappsasp

https://www.exploit-db.com/exploits/3062

View Code ZIP pw:eip

This exploit demonstrates a SQL injection vulnerability in autoDealer <= 2.0 (iPro) via the 'iPro' parameter in detail.asp. It allows an attacker to extract sensitive information such as user access levels and passwords from the database.

Classification

Working Poc 90%