CVE-2010-2359

CVE-2010-2359 is a SQL injection vulnerability in ActiveWebSoftwares.com eWebquiz 8, impacting the eWebQuiz.asp component. The flaw allows remote attackers to execute arbitrary SQL commands via the QuizType parameter, as described in the NVD entry (a different vector than CVE-2007-1706). The conn...

CVE-2009-4436

CVE-2009-4436 describes multiple SQL injection vulnerabilities in Active Web Software’s eWebquiz 8. Attackable vectors are the QuizID parameter passed to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp. The issue allows remote attackers to execute arbitrary SQL commands. These ...