2 matches found
Sql injection
SQL injection vulnerability in page.asp in Design4Online UserPages2 2.0 allows remote attackers to execute arbitrary SQL commands via the artid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-1077
CVE-2007-1077 affects Design4Online UserPages2 2.0 and is due to an SQL injection in page.asp, exploitable via the art_id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, with potential impact on data confidentiality, integrity, and availability as described...