← Back

Active Web Softwares

active_web_softwares

9 CVEs • 6 products

Products (6)

Click to collapse
Toggle
Active Auction House
active_auction_house
3 CVEs
Activebuyandsell
activebuyandsell
2 CVEs
Active Photo Gallery
active_photo_gallery
1 CVE
Active Link Engine
active_link_engine
1 CVE
Active Newsletter
active_newsletter
1 CVE
Active Test
active_test
1 CVE

CVEs (9)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-5959
1Active Web Softwares
1Active Test
Apr 23, 2026
Jan 23, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or (2) password parameter (aka password...Show more
Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) useremail parameter (aka username field) or (2) password parameter (aka password field). NOTE: some of these details are obtained from third party information.Show less
CVE-2007-1712
1Active Web Softwares
1Active Auction House
Apr 23, 2026
Mar 27, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2007-1696
1Active Web Softwares
1Active Newsletter
Apr 23, 2026
Mar 27, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsPaperID parameter.
CVE-2007-1630
1Active Web Softwares
1Active Link Engine
Apr 23, 2026
Mar 23, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2007-1629
1Active Web Softwares
1Active Photo Gallery
Apr 23, 2026
Mar 23, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVE-2005-2063
1Active Web Softwares
1Activebuyandsell
Apr 16, 2026
Jun 29, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to sendpassword.asp or (2) Keyword field in search.asp...Show more
Multiple cross-site scripting (XSS) vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to sendpassword.asp or (2) Keyword field in search.asp.Show less
CVE-2005-2062
1Active Web Softwares
1Activebuyandsell
Apr 16, 2026
Jun 29, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to execute arbitrary SQL commands via the catid parameter to (1) default.asp or (2) buyersend.asp, (3) Administrator ID field in admin...Show more
Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to execute arbitrary SQL commands via the catid parameter to (1) default.asp or (2) buyersend.asp, (3) Administrator ID field in admin.asp, E-mail field in (4) advertiserstart.asp or (5) buyer.asp, or Keyword field in search.asp.Show less
CVE-2005-1030
1Active Web Softwares
1Active Auction House
Apr 16, 2026
May 2, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL paramet...Show more
Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL parameter to account.asp, (5) Table, (6) Title parameter to sendpassword.asp, or (7) itemid to watchthisitem.asp.Show less
CVE-2005-1029
1Active Web Softwares
1Active Auction House
Apr 16, 2026
Apr 6, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to Item...Show more
Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp.Show less