CVE-2007-3987

The CVE-2007-3987 entry concerns ImageRacer 1.0 where the SQL injection occurs in SearchResults.asp when WordSearchCrit is enabled. The vulnerability is triggered through the SearchWord parameter, allowing remote attackers to execute arbitrary SQL commands. This is a network-remote issue with low...