CVE-2008-5959

CVE-2008-5959 describes multiple SQL injection vulnerabilities in start.asp of Active Test 2.1. The issues allow remote attackers to execute arbitrary SQL commands through the (1) useremail (username) parameter or (2) password parameter. The description notes some details来自 third-party sources. T...