activewebsoftwares vulnerabilities

Recent CVEs affecting activewebsoftwares products. 27 tracked.

activewebsoftwares has 27 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2010-06-21. Highest priority: CVE-2008-5958 (score 51/100).

• CVE-2010-2359 HIGH 7.5 DOWNGRADE SQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote attackers to ex
• CVE-2009-4464 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote att
• CVE-2009-4437 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary
• CVE-2009-4436 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute ar
• CVE-2009-4229 HIGH 7.5 MITIGATE Multiple SQL injection vulnerabilities in ActiveWebSoftwares Active Bids allow remote attackers to execute arb
• CVE-2009-0430 MEDIUM 4.3 MITIGATE Multiple cross-site scripting (XSS) vulnerabilities in Active Bids allow remote attackers to inject arbitrary
• CVE-2009-0429 HIGH 7.5 MITIGATE Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands
• CVE-2008-6889 HIGH 7.5 DOWNGRADE SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrar
• CVE-2008-6873 HIGH 7.5 DOWNGRADE SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands v
• CVE-2008-6387 MEDIUM 5.0 DOWNGRADE Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, whi
• CVE-2008-6380 HIGH 7.5 DOWNGRADE SQL injection vulnerability in default.aspx in Active Web Helpdesk 2.0 allows remote attackers to execute arbi
• CVE-2008-6286 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers
• CVE-2008-5975 HIGH 7.5 DOWNGRADE SQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers to execute arb
• CVE-2008-5974 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to
• CVE-2008-5973 HIGH 7.5 DOWNGRADE SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary
• CVE-2008-5972 HIGH 7.5 DOWNGRADE SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute a
• CVE-2008-5958 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL comm
• CVE-2008-5641 HIGH 7.5 DOWNGRADE SQL injection vulnerability in account.asp in Active Photo Gallery 6.2 allows remote attackers to execute arbi
• CVE-2008-5640 HIGH 7.5 DOWNGRADE SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary
• CVE-2008-5638 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrar
• CVE-2008-5635 HIGH 7.5 DOWNGRADE SQL injection vulnerability in account.asp in Active Membership 2.0 allows remote attackers to execute arbitra
• CVE-2008-5634 HIGH 7.5 DOWNGRADE SQL injection vulnerability in account.asp in Active Force Matrix 2.0 allows remote attackers to execute arbit
• CVE-2008-5633 HIGH 7.5 DOWNGRADE SQL injection vulnerability in register.asp in ActiveVotes 2.2 allows remote attackers to execute arbitrary SQ
• CVE-2008-5632 HIGH 7.5 DOWNGRADE SQL injection vulnerability in Account.asp in Active Time Billing 3.2 allows remote attackers to execute arbit
• CVE-2008-5631 HIGH 7.5 DOWNGRADE SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary S
• CVE-2008-5627 HIGH 7.5 DOWNGRADE SQL injection vulnerability in account.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL
• CVE-2008-5365 HIGH 7.5 DOWNGRADE SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers t

FAQ

How do I fix activewebsoftwares vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is activewebsoftwares being exploited right now?

None of the tracked activewebsoftwares CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which activewebsoftwares CVE should I patch first?

CVE-2008-5958 currently ranks highest (51/100): Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL comm.

Products

• active auction house
• active bids
• active business directory
• active ewebquiz
• active force matrix
• active membership
• active newsletter
• active photo gallery
• active price comparison
• active test
• active time billing
• active trade
• active web helpdesk
• active web mail
• activevotes
• aspreferral
• ewebquiz
• quick tree view .net

RSS feed for activewebsoftwares · ← Back to latest CVEs