CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2007-0632
https://notcve.org/view.php?id=CVE-2007-0632
SQL injection vulnerability in artreplydelete.asp in ASP EDGE 1.3a and earlier allows remote attackers to execute arbitrary SQL commands via a username cookie, a different vector than CVE-2007-0560. Vulnerabilidad de inyección SQL en artreplydelete.asp de ASP EDGE 1.3a y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección mediante una cookie "nombre de usuario", vector distinto a CVE-2007-0560. • http://osvdb.org/36634 http://www.vupen.com/english/advisories/2007/0341 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2007-0560 – ASP EDGE 1.2b - 'user.asp' SQL Injection
https://notcve.org/view.php?id=CVE-2007-0560
SQL injection vulnerability in user.asp in ASP EDGE 1.2b and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter. Vulnerabilidad de inyección SQL en user.asp de ASP EDGE 1.2b y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro user. • https://www.exploit-db.com/exploits/3186 http://osvdb.org/31619 http://secunia.com/advisories/23894 http://www.securityfocus.com/archive/1/458058/100/100/threaded http://www.securityfocus.com/bid/22212 http://www.vupen.com/english/advisories/2007/0341 https://exchange.xforce.ibmcloud.com/vulnerabilities/31723 •