CVE-2008-5958 Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quizt...
HighCVSS 7.5
EPSS 1.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activewebsoftwares active test | = 2.1 | No fix listed |
References
- 50405 vdb-entry
- 50406 vdb-entry
- 50407 vdb-entry
- 32902 third-party-advisory vendor-advisory
- 32547 vdb-entry
- ADV-2008-3299 vdb-entry
- activetest-quizid-sql-injection(46919) vdb-entry
- 7295 exploit