CVE-2008-5974 Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) password and (2) username fields.
HighCVSS 7.5
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) password and (2) username fields.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activewebsoftwares active price comparison | = 4.0 | No fix listed |
References
- 32921 third-party-advisory vendor-advisory
- ADV-2008-3296 vdb-entry
- activeprice-login-sql-injection(46909) vdb-entry
- 7283 exploit