CVE-2008-5631

SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or the (2) password parameter.  NOTE: some of these details are obtained from third party information.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 38%
VendorProductVersion
activewebsoftwaresactive_ewebquiz
8.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/32927
https://exchange.xforce.ibmcloud.com/vulnerabilities/46910
https://www.exploit-db.com/exploits/7279
http://secunia.com/advisories/32927
https://exchange.xforce.ibmcloud.com/vulnerabilities/46910
https://www.exploit-db.com/exploits/7279