CVE-2007-5704

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-10-29 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the (1) Email Address and (2) Password fields in (a) login.asp and (b) admin_login.asp.

Affected products

Codewidgets Online Event Registration Template: all versions

References

http://secunia.com/advisories/27375
http://securityreason.com/securityalert/3313
http://www.osvdb.org/38167
http://www.osvdb.org/38168
http://www.securityfocus.com/archive/1/482730/100/0/threaded
http://www.securityfocus.com/bid/26192
https://exchange.xforce.ibmcloud.com/vulnerabilities/37424
http://secunia.com/advisories/27375
http://securityreason.com/securityalert/3313
http://www.osvdb.org/38167
http://www.osvdb.org/38168
http://www.securityfocus.com/archive/1/482730/100/0/threaded

Get alerted when CVE-2007-5704 or the next vulnerability affects your stack