Sql injection

2008-12-1717:30:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.6%

JSON

SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
active_membershipeq2.0

CPE	Name	Operator	Version
	active_membership	eq	2.0

References

secunia.com/advisories/32895

exchange.xforce.ibmcloud.com/vulnerabilities/46917

www.exploit-db.com/exploits/7278