CVE-2008-5958

2009-01-2318:38:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

JSON

Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp.

References

osvdb.org/50405

osvdb.org/50406

osvdb.org/50407

secunia.com/advisories/32902

www.securityfocus.com/bid/32547

www.vupen.com/english/advisories/2008/3299

exchange.xforce.ibmcloud.com/vulnerabilities/46919

www.exploit-db.com/exploits/7295