CVEvulnerability
CVE-2008-5958
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-01-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp.
Affected configurations
• activewebsoftwares active test 2.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/50405 osvdb.org
- http://osvdb.org/50406 osvdb.org
- http://osvdb.org/50407 osvdb.org
- http://secunia.com/advisories/32902 Vendor Advisory
- http://www.securityfocus.com/bid/32547 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/3299 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46919 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7295 www.exploit-db.com
- http://osvdb.org/50405 osvdb.org
- http://osvdb.org/50406 osvdb.org
- http://osvdb.org/50407 osvdb.org
- http://secunia.com/advisories/32902 Vendor Advisory
- http://www.securityfocus.com/bid/32547 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/3299 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46919 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7295 www.exploit-db.com