CVE-2008-5959

Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or (2) password parameter (aka password field).  NOTE: some of these details are obtained from third party information.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 39%
VendorProductVersion
active_web_softwaresactive_test
2.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/50408
http://secunia.com/advisories/32902
https://exchange.xforce.ibmcloud.com/vulnerabilities/46921
https://www.exploit-db.com/exploits/7276
http://osvdb.org/50408
http://secunia.com/advisories/32902
https://exchange.xforce.ibmcloud.com/vulnerabilities/46921
https://www.exploit-db.com/exploits/7276