NVD

Id
5377  
Name
CVE-2008-5635  
Description
SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-12-17  
Modified Date
2009-08-15  
Seq
2008-5635  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
33746 5377 CVE-2008-5635 7278  View
33747 5377 CVE-2008-5635 activemembership-start-sql-injection(46917)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48445 JVNDB-2008-003755 Active Membership の account.asp における SQL インジェクションの脆弱性 Active Membership の account.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2008-5635 35748 CVE-2008-5635 5377 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003755.html 2008-12-17 2012-06-26 View