4 matches found
Sql injection
SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...
CVE-2008-5635
SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...
CVE-2008-5635
CVE-2008-5635 is a SQL injection vulnerability in Active Membership 2.0 disclosed via account.asp where the (1) username and (2) password parameters can be manipulated to execute arbitrary SQL commands, potentially related to start.asp. The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) wit...
CVE-2008-5635
SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...