CVE-2009-4437 in Active Web Softwares Active Auction House
Sumário (Inglês)
Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to wishlist.asp and the (2) linkid parameter to links.asp. NOTE: vector 1 might overlap CVE-2005-1029.1.
Reservar
28/12/2009
Divulgação
28/12/2009
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 51319 | Active Web Softwares Active Auction House wishlist.asp Injeção SQL | 89 | Alto | Unavailable | CVE-2009-4437 |