CVE-2008-5635

CVE-2008-5635 is a SQL injection vulnerability in Active Membership 2.0 disclosed via account.asp where the (1) username and (2) password parameters can be manipulated to execute arbitrary SQL commands, potentially related to start.asp. The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) wit...