CVEvulnerability
CVE-2008-5631
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-12-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or the (2) password parameter. NOTE: some of these details are obtained from third party information.
Affected configurations
• activewebsoftwares active ewebquiz 8.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/32927 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46910 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7279 www.exploit-db.com
- http://secunia.com/advisories/32927 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46910 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7279 www.exploit-db.com