3 matches found
Sql injection
SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attackers to execute arbitrary SQL commands via the SearchWord parameter...
CVE-2007-3987
SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attackers to execute arbitrary SQL commands via the SearchWord parameter...
CVE-2007-3987
The CVE-2007-3987 entry concerns ImageRacer 1.0 where the SQL injection occurs in SearchResults.asp when WordSearchCrit is enabled. The vulnerability is triggered through the SearchWord parameter, allowing remote attackers to execute arbitrary SQL commands. This is a network-remote issue with low...