CVE-2007-1630

CVE-2007-1630 describes an SQL injection in the ActiveLink Engine from ActiveWebSoftwares. The vulnerability resides in the default.asp script, with the catid parameter enabling remote attackers to execute arbitrary SQL commands. The NVD entry notes a base score of 7.5 (High) with network access,...