CVE-2007-5220

The CVE-2007-5220 entry concerns an SQL injection vulnerability in catalog.asp of the ASP Product Catalog. The affected component is the catalog.asp endpoint, with the cid parameter (and possibly other parameters) as the injection vector. The underlying issue allows remote attackers to execute ar...