CVE-2008-6286

Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via (1) the email parameter (aka username or E-mail field), or (2) the password parameter (aka password field), to (a) Subscriber.asp or (b) start.asp. NOTE: some of these details are obtained from third party information.

Link	Resource
http://secunia.com/advisories/32908	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46916
https://www.exploit-db.com/exploits/7280

Configuration 1

cpe:2.3:a:activewebsoftwares:active_newsletter:4.3:*:*:*:*:*:*:*

---

Published : 2009-02-25 11:30

Updated : 2017-09-29 01:33

---

NVD link : CVE-2008-6286

Mitre link : CVE-2008-6286

Active Newsletter

Activewebsoftwares

CWE-89