SQL Injection Vulnerabilities in Active Test 2.1 by Active Software
CVE-2008-5959
Currently unrated
Key Information:
- Vendor
Active Web Softwares
- Status
- Vendor
- CVE Published:
- 23 January 2009
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2008-5959?
Multiple SQL injection vulnerabilities exist in the start.asp file of Active Test 2.1, which allow remote attackers to execute arbitrary SQL commands. By manipulating the 'useremail' and 'password' parameters, attackers can potentially gain unauthorized access to the database, leading to data leakage or other malicious activities. This vulnerability underscores the importance of securing input fields and validating user data to prevent injection attacks.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.