Activewebsoftwares

Records27All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high24CVSS 7.0–8.9

Exploited now

Activewebsoftwares records in CISA KEV

No Activewebsoftwares vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Active Bids 4 records LOW Active Price Comparison 3 records LOW Active Business Directory 2 records LOW Active Web Mail 2 records LOW Activevotes 2 records LOW Ewebquiz 2 records LOW Active Auction House 1 record LOW Active Ewebquiz 1 record LOW

Records

1 record in Active Auction House · all components

TI-2009-04200 CVE-2009-4437 · GHSA-92rp-9h67-q25v

Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to wishlist.asp and the (2) linkid parameter to links.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01024 Published 2009-12-28 No fix listed CWE-89

Open these records in search →

Critical	0
High	24
Medium	3
Low	0
No CVSS	0