Filtered by vendor Activewebsoftwares Subscriptions
Filtered by product Active Auction House Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2009-4437 1 Activewebsoftwares 1 Active Auction House 2024-08-07 N/A
Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to wishlist.asp and the (2) linkid parameter to links.asp. NOTE: vector 1 might overlap CVE-2005-1029.1.