CVE-2007-0129: Locazo Locazolist Classifieds

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitrary SQL commands via the subcatID parameter.

Affected products

• Locazo Locazolist Classifieds: up to and including 2.01a_beta5

Published 2007-01-09. Last modified 2026-06-16.