CVE-2008-5631 SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or the (2) password param...
HighCVSS 7.5
EPSS 1.00%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or the (2) password parameter. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activewebsoftwares active ewebquiz | = 8.0 | No fix listed |
References
- 32927 third-party-advisory vendor-advisory
- ewebquiz-start-sql-injection(46910) vdb-entry
- 7279 exploit