7.5
CVSSv2

CVE-2007-0575

Published: 30/01/2007 Updated: 16/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple SQL injection vulnerabilities in the administrative login page (admin/login.asp) in ASPCode.net AdMentor allow remote malicious users to execute arbitrary SQL commands via the (1) Userid and (2) Password fields.

Vulnerable Product Search on Vulmon Subscribe to Product

stefan holmberg admentor

Exploits

source: wwwsecurityfocuscom/bid/22281/info AdMentor is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underly ...