PatchTheCVEactive bids vulnerabilities and fixes
Recent CVEs affecting active bids, with upgrade or downgrade steps. 4 tracked.
Also searched as: activebids.
active bids has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-12-08. Highest priority: CVE-2008-5640 (score 48/100).
- CVE-2009-4229 HIGH 7.5 MITIGATE Multiple SQL injection vulnerabilities in ActiveWebSoftwares Active Bids allow remote attackers to execute arb
- CVE-2009-0430 MEDIUM 4.3 MITIGATE Multiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to inject arbitrary
- CVE-2009-0429 HIGH 7.5 MITIGATE Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands
- CVE-2008-5640 HIGH 7.5 DOWNGRADE SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary
FAQ
How do I fix active bids vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is active bids being exploited right now?
None of the tracked active bids CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which active bids CVE should I patch first?
CVE-2008-5640 currently ranks highest (48/100): SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary .