CVEvulnerability
CVE-2008-5959
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-01-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or (2) password parameter (aka password field). NOTE: some of these details are obtained from third party information.
Affected configurations
• active web softwares active test 2.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/50408 osvdb.org
- http://secunia.com/advisories/32902 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46921 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7276 www.exploit-db.com
- http://osvdb.org/50408 osvdb.org
- http://secunia.com/advisories/32902 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46921 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7276 www.exploit-db.com