CVE-2008-5633 SQL injection vulnerability in register.asp in ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp...
HighCVSS 7.5
EPSS 1.00%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in register.asp in ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activewebsoftwares activevotes | = 2.2 | No fix listed |
References
- 32895 third-party-advisory vendor-advisory
- activevotes-register-sql-injection(46925) vdb-entry
- 7275 exploit