CVE-2007-0129

CVE-2007-0129 describes an SQL injection in LocazoList (main.asp) affecting version 2.01a beta5 and earlier. The vulnerability is triggered via the subcatID parameter, enabling remote attackers to execute arbitrary SQL commands. Exploitation is network‑based with low complexity and no authenticat...