Activewebsoftwares

Records27All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high24CVSS 7.0–8.9

Exploited now

Activewebsoftwares records in CISA KEV

No Activewebsoftwares vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Active Bids 4 records LOW Active Price Comparison 3 records LOW Active Business Directory 2 records LOW Active Web Mail 2 records LOW Activevotes 2 records LOW Ewebquiz 2 records LOW Active Auction House 1 record LOW Active Ewebquiz 1 record LOW

Records

2 records in Active Web Mail · all components

TI-2008-06561 CVE-2008-6873 · GHSA-pv45-36m7-w986

SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute…

LOW 35

SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to (1) popaccounts.aspx, (2) addressbook.aspx, and (3) emails.aspx.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2009-07-23 No fix listed CWE-89

TI-2008-05669 CVE-2008-5973 · GHSA-ph74-q57f-5rmj

SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers…

LOW 35

SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2009-01-27 No fix listed CWE-89

Open these records in search →

Critical	0
High	24
Medium	3
Low	0
No CVSS	0