CVE

Id
36075  
CVE No.
CVE-2008-5958  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp.  
Phase
Assigned (20090123)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
395824 36075 CVE-2008-5958 MILW0RM:7295  View
395825 36075 CVE-2008-5958 URL:http://www.milw0rm.com/exploits/7295  View
395826 36075 CVE-2008-5958 BID:32547  View
395827 36075 CVE-2008-5958 URL:http://www.securityfocus.com/bid/32547  View
395828 36075 CVE-2008-5958 VUPEN:ADV-2008-3299  View
395829 36075 CVE-2008-5958 URL:http://www.vupen.com/english/advisories/2008/3299  View
395830 36075 CVE-2008-5958 OSVDB:50405  View
395831 36075 CVE-2008-5958 URL:http://osvdb.org/50405  View
395832 36075 CVE-2008-5958 OSVDB:50406  View
395833 36075 CVE-2008-5958 URL:http://osvdb.org/50406  View
395834 36075 CVE-2008-5958 OSVDB:50407  View
395835 36075 CVE-2008-5958 URL:http://osvdb.org/50407  View
395836 36075 CVE-2008-5958 SECUNIA:32902  View
395837 36075 CVE-2008-5958 URL:http://secunia.com/advisories/32902  View
395838 36075 CVE-2008-5958 XF:activetest-quizid-sql-injection(46919)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41768 JVNDB-2009-002775 Gravity GTD の library/setup/rpc.php におけるディレクトリトラバーサルの脆弱性 Gravity Getting Things Done (GTD) の library/setup/rpc.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-5962 36075 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002775.html  View