Vulnerabilities > CVE-2007-1629 - SQL Injection vulnerability in Active web Softwares Active Photo Gallery 6.2

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
active-web-softwares
exploit available
NVD
Published: 2007-03-23
Updated: 2017-10-11

Summary

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL commands via the catid parameter.

Vulnerable Configurations

Part Description Count
Application
Active_Web_Softwares
1

Exploit-Db

descriptionActive Photo Gallery (default.asp catid) SQL Injection Vulnerability. CVE-2007-1629. Webapps exploit for asp platform
fileexploits/asp/webapps/3536.txt
idEDB-ID:3536
last seen2016-01-31
modified2007-03-21
platformasp
port
published2007-03-21
reporterCyberGhost
sourcehttps://www.exploit-db.com/download/3536/
titleActive Photo Gallery default.asp catid SQL Injection Vulnerability
typewebapps

References