VYPR

Active Newsletter

by Activewebsoftwares

CVEs (2)

  • CVE-2008-6286Feb 25, 2009
    risk 0.03cvss epss 0.01

    Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via (1) the email parameter (aka username or E-mail field), or (2) the password parameter (aka password field), to (a) Subscriber.asp…

  • CVE-2007-1696Mar 27, 2007
    risk 0.03cvss epss 0.01

    SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsPaperID parameter.