Activewebsoftwares

Active Price Comparison

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2008-5974

  • EPSS 0.47%
  • Published 27.01.2009 01:30:00
  • Last modified 09.04.2025 00:30:58

Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) password and (2) username fields.

7.5

CVE-2008-5975

Exploit
  • EPSS 0.11%
  • Published 27.01.2009 01:30:00
  • Last modified 09.04.2025 00:30:58

SQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers to execute arbitrary SQL commands via the linkid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from thi...

7.5

CVE-2008-5638

  • EPSS 0.17%
  • Published 17.12.2008 17:30:00
  • Last modified 09.04.2025 00:30:58

Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the (1) ProductID parameter to reviews.aspx or the (2) linkid parameter to links.asp.