CVE-2007-0560 - SQL injection vulnerability in user.asp in ASP EDGE 1.2b and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in user.asp in ASP EDGE 1.2b and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter

Published Jan 30, 2007

7.5

HIGH

CVSS 2.0

EPSS 1.30%

Description

SQL injection vulnerability in user.asp in ASP EDGE 1.2b and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://osvdb.org/31619
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/23894
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/458058/100/100/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/22212
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2007/0341
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/31723
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/3186
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://osvdb.org/31619		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/23894		third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/458058/100/100/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/22212		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2007/0341		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/31723		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/3186		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 30, 2007

Updated Aug 7, 2024

Reserved Jan 30, 2007

Link CVE-2007-0560

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2007-0560

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-0560