Sql injection

SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2008-5640

SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2008-5640

SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2008-5640

CVE-2008-5640 describes an SQL injection in bidhistory.asp of Active Bids 3.5, exploitable via the ItemID parameter and enabling remote SQL command execution. Affected product: Active Bids 3.5 (bidhistory.asp). Root cause: unsanitized ItemID parameter leading to SQL injection. Impact: partial con...

Active Bids 3.5 - 'itemID' Blind SQL Injection

Tybe : Remote Blind SQL Injection Vulnerability Vendor : www.activewebsoftwares.com Software : Active Bids author : Mountassif Moad http://site.il/activebids/bidhistory.asp?ItemID=354%20and%201=1 http://site.il/activebids/bidhistory.asp?ItemID=354%20and%201=0 Demo :...