Filtered by vendor Activewebsoftwares Subscriptions
Filtered by product Active Newsletter Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2008-6286 1 Activewebsoftwares 1 Active Newsletter 2024-08-07 N/A
Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via (1) the email parameter (aka username or E-mail field), or (2) the password parameter (aka password field), to (a) Subscriber.asp or (b) start.asp. NOTE: some of these details are obtained from third party information.