Read the docs

Activewebsoftwares

Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high24CVSS 7.0–8.9

Exploited now

Activewebsoftwares records in CISA KEV

No Activewebsoftwares vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Active Price Comparison · all components

Priority LOW 35

Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the (1) ProductID parameter to reviews.aspx or the (2) linkid parameter to links.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0101 Published 2008-12-17 No fix listed CWE-89
Open these records in search →