CVE-2008-5958

Description

Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp.

References

https://www.exploit-db.com/exploits/7295

https://exchange.xforce.ibmcloud.com/vulnerabilities/46919

http://www.vupen.com/english/advisories/2008/3299

http://www.securityfocus.com/bid/32547

http://secunia.com/advisories/32902

http://osvdb.org/50407

http://osvdb.org/50406

http://osvdb.org/50405

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS