Sql injection

SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary SQL commands via the 1 useremail parameter aka username field or the 2 password parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2008-5632

SQL injection vulnerability in Account.asp in Active Time Billing 3.2 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...

CVE-2008-5640

SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2008-5635

SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...

CVE-2008-5641

SQL injection vulnerability in account.asp in Active Photo Gallery 6.2 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

Sql injection

SQL injection vulnerability in account.asp in Active Force Matrix 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in account.asp in Active Photo Gallery 6.2 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2008-5640

SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2008-5627

The connected data confirms a concrete SQL injection vulnerability in Active Trade 2, specifically in account.asp, exploitable via the username (Email) or password parameters. This allows remote attackers to execute arbitrary SQL commands against the underlying database. The CVE entry (CVE-2008-5...

CVE-2008-5635

CVE-2008-5635 is a SQL injection vulnerability in Active Membership 2.0 disclosed via account.asp where the (1) username and (2) password parameters can be manipulated to execute arbitrary SQL commands, potentially related to start.asp. The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) wit...

CVE-2008-5638

Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the 1 ProductID parameter to reviews.aspx or the 2 linkid parameter to links.asp...

CVE-2008-5638

CVE-2008-5638 : Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the ProductID parameter to reviews.aspx or the linkid parameter to links.asp. The issue is evidenced by multiple sources (NVD entry and Exploit-DB listi...

CVE-2008-5641

CVE-2008-5641 affects Active Photo Gallery 6.2 and is an SQL injection in account.asp, enabling remote SQL execution via the username and password parameters. The connected exploit listing (Active Photo Gallery v6.2 – Auth Bypass Remote SQL Injection) confirms exploitation possibilities, implying...

CVE-2008-5640

CVE-2008-5640 describes an SQL injection in bidhistory.asp of Active Bids 3.5, exploitable via the ItemID parameter and enabling remote SQL command execution. Affected product: Active Bids 3.5 (bidhistory.asp). Root cause: unsanitized ItemID parameter leading to SQL injection. Impact: partial con...

CVE-2008-5631

Active eWebquiz 8.0 is affected by a SQL injection vulnerability in start.asp, exploitable via the useremail (username) or password parameter, enabling remote SQL command execution. The issue is documented across multiple sources (NVD and related CVE records). The root cause is a SQL injection fl...

CVE-2008-5634

SQL injection vulnerability in account.asp in Active Force Matrix 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...

CVE-2008-5641

SQL injection vulnerability in account.asp in Active Photo Gallery 6.2 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2008-5632

Connected documents corroborate a SQL injection vulnerability in Active Time Billing 3.2, specifically in Account.asp, exploitable via the username and password parameters (possibly related to start.asp). The root cause is not explicitly detailed beyond the injection vector. No remediation, patch...

CVE-2008-5635

SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...