Vulnerabilities > CVE-2007-1630 - SQL Injection vulnerability in Active Link Engine Default.ASP

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
active-web-softwares
exploit available
NVD
Published: 2007-03-23
Updated: 2017-10-11

Summary

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute arbitrary SQL commands via the catid parameter.

Vulnerable Configurations

Part Description Count
Application
Active_Web_Softwares
1

Exploit-Db

descriptionActive Link Engine (default.asp catid) Remote SQL Injection Vulnerability. CVE-2007-1630. Webapps exploit for asp platform
fileexploits/asp/webapps/3534.txt
idEDB-ID:3534
last seen2016-01-31
modified2007-03-21
platformasp
port
published2007-03-21
reporterCyberGhost
sourcehttps://www.exploit-db.com/download/3534/
titleActive Link Engine default.asp catid Remote SQL Injection Vulnerability
typewebapps

References