CVE-2008-5958

EPSS 1.7%

Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/7295unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/50405 http://osvdb.org/50406 http://osvdb.org/50407 http://secunia.com/advisories/32902 https://exchange.xforce.ibmcloud.com/vulnerabilities/46919 https://www.exploit-db.com/exploits/7295 http://www.securityfocus.com/bid/32547 http://www.vupen.com/english/advisories/2008/3299