CVE-2007-1630

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-03-23 · updated 2026-06-16

Description

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute arbitrary SQL commands via the catid parameter.

Affected products

Active Web Softwares Active Link Engine: all versions

References

http://secunia.com/advisories/24574
http://www.osvdb.org/34364
http://www.securityfocus.com/bid/23080
http://www.vupen.com/english/advisories/2007/1071
https://exchange.xforce.ibmcloud.com/vulnerabilities/33111
https://www.exploit-db.com/exploits/3534
http://secunia.com/advisories/24574
http://www.osvdb.org/34364
http://www.securityfocus.com/bid/23080
http://www.vupen.com/english/advisories/2007/1071
https://exchange.xforce.ibmcloud.com/vulnerabilities/33111
https://www.exploit-db.com/exploits/3534

Get alerted when CVE-2007-1630 or the next vulnerability affects your stack