CVE-2007-2997
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2007-2997
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple SQL injection vulnerabilities in cgi-bin/reorder2.asp in SalesCart Shopping Cart allow remote attackers to execute arbitrary SQL commands via the password field and other unspecified vectors. NOTE: the vendor disputes this issue, stating "We were able to reproduce this sql injection on an old out-of-date demo on the website but not on the released product.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
SalesCart Shopping Cart Reorder2.ASP 多个SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SalesCart Shopping Cart的cgi-bin/reorder2.asp中存在多个SQL注入漏洞。远程攻击者可以借助密码字段和其他未明向量，执行任意的SQL指令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2007-2997
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-2997
Please Login to view more intelligence information
Same Patch Batch · n/a · 2007-06-04 · 24 CVEs total
| CVE-2007-2996 | IBM AIX Perl Interpreter 本地任意代码执行漏洞 | |
| CVE-2007-1862 | Apache mod_mem_cache远程信息泄露漏洞 | |
| CVE-2007-3009 | Mbedthis AppWeb URL协议格式串处理漏洞 | |
| CVE-2007-3008 | Mbedthis AppWeb HTTP TRACE 信息泄露漏洞 | |
| CVE-2007-3007 | PHP realpath()函数绕过安全限制漏洞 | |
| CVE-2007-3006 | Acoustica MP3 CD Burner播放列表文件处理栈溢出漏洞 | |
| CVE-2007-3003 | MyBloggie Index.PHP 多个SQL注入漏洞 | |
| CVE-2007-3002 | PHP JackKnife 多个输入验证漏洞 | |
| CVE-2007-3001 | PHP JackKnife 跨站脚本攻击漏洞 | |
| CVE-2007-3000 | PHP JackKnife 多个输入验证漏洞 | |
| CVE-2007-2999 | Microsoft Active Directory Logon Hours 用户名列举缺陷 | |
| CVE-2007-2998 | OpenVMS Integrity Servers 拒绝服务攻击 | |
| CVE-2007-1593 | Symantec Veritas Volume Replicator管理服务远程拒绝服务漏洞 | |
| CVE-2007-2995 | IBM AIX sysmgt.websm.rte 未明漏洞 | |
| CVE-2007-2994 | DGNews NewsID Parameter SQL注入漏洞 | |
| CVE-2007-2872 | PHP 数字错误漏洞 | |
| CVE-2007-2387 | Apple Xserve Lights-Out管理系统IPMI远程权限提升漏洞 | |
| CVE-2007-2993 | Omegasoft Insel 跨站脚本攻击漏洞 | |
| CVE-2007-2992 | Omegasoft Insel 多个输入验证漏洞 | |
| CVE-2007-2991 | Evenzia Content Management Systems (CMS) 跨站脚本攻击漏洞 |
Showing top 20 of 24 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8196
JeecgBoot mLogin Endpoint LoginController.java authorization - CVE-2026-8195
JeecgBoot SVG File CommonController.java cross site scriptin - CVE-2026-8194
osTicket Dispatcher class.dispatcher.php cross-site request - CVE-2026-8193
Akaunting Invoice PDF Rendering dompdf.php server-side reque - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-
V. Comments for CVE-2007-2997
No comments yet