Vendor CVEs

Activewebsoftwares

All CVEs

38 total · sorted by risk

CVE	Vendor / Product	Risk	CVSS	EPSS	Published	Description
CVE-2010-2359	Activewebsoftwares Ewebquiz	0.03	—	0.01	Jun 21, 2010	SQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote attackers to execute arbitrary SQL commands via the QuizType parameter, a different vector than CVE-2007-1706.
CVE-2009-4464	Activewebsoftwares Active Business Directory	0.03	—	0.01	Dec 30, 2009	Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
CVE-2009-4437	Active Auction House Active Auction House	0.03	—	0.01	Dec 28, 2009	Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to wishlist.asp and the (2) linkid parameter to links.asp. NOTE: vector 1 might overlap CVE-2005-1029.1.
CVE-2009-4436	Activewebsoftwares Ewebquiz	0.03	—	0.01	Dec 28, 2009	Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp, different vectors than CVE-2007-1706.
CVE-2009-4229	Activewebsoftwares Active Bids	0.03	—	0.01	Dec 8, 2009	Multiple SQL injection vulnerabilities in ActiveWebSoftwares Active Bids allow remote attackers to execute arbitrary SQL commands via (1) the catid parameter in the PATH_INFO to the default URI or (2) the catid parameter to default.asp. NOTE: this might overlap CVE-2009-0429.3.…
CVE-2008-6889	ASPReferral ASPReferral	0.03	—	0.01	Aug 3, 2009	SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter.
CVE-2008-6873	Active Web Mail Active Web Mail	0.03	—	0.01	Jul 23, 2009	SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to (1) popaccounts.aspx, (2) addressbook.aspx, and (3) emails.aspx.
CVE-2008-6387	Quick Tree View Quick Tree View .NET	0.03	—	0.03	Mar 2, 2009	Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to qtv.mdb.
CVE-2008-6380	Active Web Helpdesk	0.03	—	0.01	Mar 2, 2009	SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter.
CVE-2008-6286	Active Newsletter Active Newsletter	0.03	—	0.01	Feb 25, 2009	Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via (1) the email parameter (aka username or E-mail field), or (2) the password parameter (aka password field), to (a) Subscriber.asp…
CVE-2009-0430	Active Bids Active Bids	0.03	—	0.01	Feb 5, 2009	Multiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to search.asp and the (2) URL parameter to tellafriend.asp.
CVE-2009-0429	Active Bids Active Bids	0.03	—	0.01	Feb 5, 2009	Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to search.asp, (2) SortDir parameter to auctionsended.asp, and the (3) catid parameter to wishlist.php.
CVE-2008-5975	Active Price Comparison Active Price Comparison	0.03	—	0.01	Jan 27, 2009	SQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers to execute arbitrary SQL commands via the linkid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2008-5974	Active Price Comparison Active Price Comparison	0.03	—	0.01	Jan 27, 2009	Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) password and (2) username fields.
CVE-2008-5973	Active Web Mail Active Web Mail	0.03	—	0.01	Jan 27, 2009	SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.
CVE-2008-5972	Activewebsoftwares Active Business Directory	0.03	—	0.01	Jan 27, 2009	SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2008-5959	Active Test Active Test	0.03	—	0.01	Jan 23, 2009	Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or (2) password parameter (aka password field). NOTE: some of these details are obtained from…
CVE-2008-5958	Active Test Active Test	0.03	—	0.02	Jan 23, 2009	Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp.
CVE-2008-5641	Activewebsoftwares Active Photo Gallery	0.03	—	0.01	Dec 17, 2008	SQL injection vulnerability in account.asp in Active Photo Gallery 6.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
CVE-2008-5640	Active Bids Active Bids	0.03	—	0.01	Dec 17, 2008	SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.
CVE-2008-5638	Active Price Comparison Active Price Comparison	0.03	—	0.01	Dec 17, 2008	Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the (1) ProductID parameter to reviews.aspx or the (2) linkid parameter to links.asp.
CVE-2008-5635	Active Membership Active Membership	0.03	—	0.01	Dec 17, 2008	SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information.
CVE-2008-5634	Activewebsoftwares Active Force Matrix	0.03	—	0.01	Dec 17, 2008	SQL injection vulnerability in account.asp in Active Force Matrix 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information.
CVE-2008-5633	ActiveVotes ActiveVotes	0.03	—	0.01	Dec 17, 2008	SQL injection vulnerability in register.asp in ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information.
CVE-2008-5632	Active Time Billing Account.asp	0.03	—	0.01	Dec 17, 2008	SQL injection vulnerability in Account.asp in Active Time Billing 3.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information.
CVE-2008-5631	Active eWebquiz	0.03	—	0.01	Dec 17, 2008	SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or the (2) password parameter. NOTE: some of these details are obtained from third party information.
CVE-2008-5627	Activewebsoftwares Active Trade	0.03	—	0.01	Dec 17, 2008	SQL injection vulnerability in account.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the (1) username parameter (aka Email field) or the (2) password parameter. NOTE: some of these details are obtained from third party information.
CVE-2008-5365	Activewebsoftwares Activevotes	0.03	—	0.01	Dec 8, 2008	SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter.
CVE-2007-1712	Activewebsoftwares Active Auction House	0.03	—	0.01	Mar 27, 2007	SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2007-1705	Activewebsoftwares Active Trade	0.03	—	0.02	Mar 27, 2007	SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2007-1696	Activewebsoftwares Active Newsletter	0.03	—	0.01	Mar 27, 2007	SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsPaperID parameter.
CVE-2007-1706	Activewebsoftwares Ewebquiz	0.03	—	0.01	Mar 27, 2007	SQL injection vulnerability in eWebQuiz.asp in eWebQuiz 8 allows remote attackers to execute arbitrary SQL commands via the QuizID parameter.
CVE-2007-1630	Activewebsoftwares Active Link Engine	0.03	—	0.01	Mar 23, 2007	SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2007-1629	Activewebsoftwares Active Photo Gallery	0.03	—	0.01	Mar 23, 2007	SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2005-2062	Activewebsoftwares Activebuyandsell	0.03	—	0.01	Jun 29, 2005	Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to execute arbitrary SQL commands via the catid parameter to (1) default.asp or (2) buyersend.asp, (3) Administrator ID field in admin.asp, E-mail field in (4) advertiserstart.asp or (5)…
CVE-2005-1030	Activewebsoftwares Active Auction House	0.03	—	0.05	May 2, 2005	Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to…
CVE-2005-1029	Activewebsoftwares Active Auction House	0.03	—	0.04	Apr 6, 2005	Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp.
CVE-2005-2063	Activewebsoftwares Activebuyandsell	0.00	—	0.01	Jun 29, 2005	Multiple cross-site scripting (XSS) vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to sendpassword.asp or (2) Keyword field in search.asp.

CVE-2010-2359Jun 21, 2010
Activewebsoftwares
Ewebquiz
risk 0.03cvss —epss 0.01
SQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote attackers to execute arbitrary SQL commands via the QuizType parameter, a different vector than CVE-2007-1706.
CVE-2009-4464Dec 30, 2009
Activewebsoftwares
Active Business Directory
risk 0.03cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
CVE-2009-4437Dec 28, 2009
Active Auction House
Active Auction House
risk 0.03cvss —epss 0.01
Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to wishlist.asp and the (2) linkid parameter to links.asp. NOTE: vector 1 might overlap CVE-2005-1029.1.
CVE-2009-4436Dec 28, 2009
Activewebsoftwares
Ewebquiz
risk 0.03cvss —epss 0.01
Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp, different vectors than CVE-2007-1706.
CVE-2009-4229Dec 8, 2009
Activewebsoftwares
Active Bids
risk 0.03cvss —epss 0.01
Multiple SQL injection vulnerabilities in ActiveWebSoftwares Active Bids allow remote attackers to execute arbitrary SQL commands via (1) the catid parameter in the PATH_INFO to the default URI or (2) the catid parameter to default.asp. NOTE: this might overlap CVE-2009-0429.3.…
CVE-2008-6889Aug 3, 2009
ASPReferral
ASPReferral
risk 0.03cvss —epss 0.01
SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter.
CVE-2008-6873Jul 23, 2009
Active Web Mail
Active Web Mail
risk 0.03cvss —epss 0.01
SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to (1) popaccounts.aspx, (2) addressbook.aspx, and (3) emails.aspx.
CVE-2008-6387Mar 2, 2009
Quick Tree View
Quick Tree View .NET
risk 0.03cvss —epss 0.03
Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to qtv.mdb.
CVE-2008-6380Mar 2, 2009
Active Web
Helpdesk
risk 0.03cvss —epss 0.01
SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbitrary SQL commands via the CategoryID parameter.
CVE-2008-6286Feb 25, 2009
Active Newsletter
Active Newsletter
risk 0.03cvss —epss 0.01
Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via (1) the email parameter (aka username or E-mail field), or (2) the password parameter (aka password field), to (a) Subscriber.asp…
CVE-2009-0430Feb 5, 2009
Active Bids
Active Bids
risk 0.03cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to search.asp and the (2) URL parameter to tellafriend.asp.
CVE-2009-0429Feb 5, 2009
Active Bids
Active Bids
risk 0.03cvss —epss 0.01
Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to search.asp, (2) SortDir parameter to auctionsended.asp, and the (3) catid parameter to wishlist.php.
CVE-2008-5975Jan 27, 2009
Active Price Comparison
Active Price Comparison
risk 0.03cvss —epss 0.01
SQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers to execute arbitrary SQL commands via the linkid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2008-5974Jan 27, 2009
Active Price Comparison
Active Price Comparison
risk 0.03cvss —epss 0.01
Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute arbitrary SQL commands via the (1) password and (2) username fields.
CVE-2008-5973Jan 27, 2009
Active Web Mail
Active Web Mail
risk 0.03cvss —epss 0.01
SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.
CVE-2008-5972Jan 27, 2009
Activewebsoftwares
Active Business Directory
risk 0.03cvss —epss 0.01
SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2008-5959Jan 23, 2009
Active Test
Active Test
risk 0.03cvss —epss 0.01
Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or (2) password parameter (aka password field). NOTE: some of these details are obtained from…
CVE-2008-5958Jan 23, 2009
Active Test
Active Test
risk 0.03cvss —epss 0.02
Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp.
CVE-2008-5641Dec 17, 2008
Activewebsoftwares
Active Photo Gallery
risk 0.03cvss —epss 0.01
SQL injection vulnerability in account.asp in Active Photo Gallery 6.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
CVE-2008-5640Dec 17, 2008
Active Bids
Active Bids
risk 0.03cvss —epss 0.01
SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.
CVE-2008-5638Dec 17, 2008
Active Price Comparison
Active Price Comparison
risk 0.03cvss —epss 0.01
Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the (1) ProductID parameter to reviews.aspx or the (2) linkid parameter to links.asp.
CVE-2008-5635Dec 17, 2008
Active Membership
Active Membership
risk 0.03cvss —epss 0.01
SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information.
CVE-2008-5634Dec 17, 2008
Activewebsoftwares
Active Force Matrix
risk 0.03cvss —epss 0.01
SQL injection vulnerability in account.asp in Active Force Matrix 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information.
CVE-2008-5633Dec 17, 2008
ActiveVotes
ActiveVotes
risk 0.03cvss —epss 0.01
SQL injection vulnerability in register.asp in ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information.
CVE-2008-5632Dec 17, 2008
Active Time Billing
Account.asp
risk 0.03cvss —epss 0.01
SQL injection vulnerability in Account.asp in Active Time Billing 3.2 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information.
CVE-2008-5631Dec 17, 2008
Active
eWebquiz
risk 0.03cvss —epss 0.01
SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or the (2) password parameter. NOTE: some of these details are obtained from third party information.
CVE-2008-5627Dec 17, 2008
Activewebsoftwares
Active Trade
risk 0.03cvss —epss 0.01
SQL injection vulnerability in account.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the (1) username parameter (aka Email field) or the (2) password parameter. NOTE: some of these details are obtained from third party information.
CVE-2008-5365Dec 8, 2008
Activewebsoftwares
Activevotes
risk 0.03cvss —epss 0.01
SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter.
CVE-2007-1712Mar 27, 2007
Activewebsoftwares
Active Auction House
risk 0.03cvss —epss 0.01
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2007-1705Mar 27, 2007
Activewebsoftwares
Active Trade
risk 0.03cvss —epss 0.02
SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2007-1696Mar 27, 2007
Activewebsoftwares
Active Newsletter
risk 0.03cvss —epss 0.01
SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsPaperID parameter.
CVE-2007-1706Mar 27, 2007
Activewebsoftwares
Ewebquiz
risk 0.03cvss —epss 0.01
SQL injection vulnerability in eWebQuiz.asp in eWebQuiz 8 allows remote attackers to execute arbitrary SQL commands via the QuizID parameter.
CVE-2007-1630Mar 23, 2007
Activewebsoftwares
Active Link Engine
risk 0.03cvss —epss 0.01
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2007-1629Mar 23, 2007
Activewebsoftwares
Active Photo Gallery
risk 0.03cvss —epss 0.01
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2005-2062Jun 29, 2005
Activewebsoftwares
Activebuyandsell
risk 0.03cvss —epss 0.01
Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to execute arbitrary SQL commands via the catid parameter to (1) default.asp or (2) buyersend.asp, (3) Administrator ID field in admin.asp, E-mail field in (4) advertiserstart.asp or (5)…
CVE-2005-1030May 2, 2005
Activewebsoftwares
Active Auction House
risk 0.03cvss —epss 0.05
Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to…
CVE-2005-1029Apr 6, 2005
Activewebsoftwares
Active Auction House
risk 0.03cvss —epss 0.04
Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp.
CVE-2005-2063Jun 29, 2005
Activewebsoftwares
Activebuyandsell
risk 0.00cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to sendpassword.asp or (2) Keyword field in search.asp.