CVE-2007-3937

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• A-shop 0.70 - Remote File Deletion2007-07-18 · webapps · asp · Verified

Impact

Multiple SQL injection vulnerabilities in A-shop 0.70 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35484
• https://www.exploit-db.com/exploits/4198
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35484
• https://www.exploit-db.com/exploits/4198