CVE-2007-5704

CodeWidgets.com Online Event Registration Template - SQL Injection via Email Address or Password Field

Title source: llm
STIX 2.1

Description

Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the (1) Email Address and (2) Password fields in (a) login.asp and (b) admin_login.asp.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/482730/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27375
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/38168
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/37424
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26192
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/38167
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3313

Scores

EPSS 0.0130
EPSS Percentile 67.6%

Details

CWE
CWE-89
Status published
Products (1)
codewidgets/online_event_registration_template
Published Oct 29, 2007
Tracked Since Feb 18, 2026