cbcvebase.

Activewebsoftwares Active Newsletter vulnerabilities

1 known vulnerability affecting activewebsoftwares/active_newsletter.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2008-6286P3HIGHCVSS 7.5PoCv4.32009-02-25
CVE-2008-6286 [HIGH] CWE-89 CVE-2008-6286: Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via (1) the email parameter (aka username or E-mail field), or (2) the password parameter (aka password field), to (a) Subscriber.asp or (b) start.asp. NOTE: some of these details are obtained from third party inf
nvd
Activewebsoftwares Active Newsletter vulnerabilities | cvebase