NVD

Id
5373  
Name
CVE-2008-5631  
Description
SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or the (2) password parameter. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-12-17  
Modified Date
2009-08-15  
Seq
2008-5631  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
33738 5373 CVE-2008-5631 7279  View
33739 5373 CVE-2008-5631 ewebquiz-start-sql-injection(46910)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48441 JVNDB-2008-003751 Active eWebquiz の start.asp における SQL インジェクションの脆弱性 Active eWebquiz の start.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2008-5631 35744 CVE-2008-5631 5373 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003751.html 2008-12-17 2012-06-26 View