high7.5Public exploit code
CVE-2009-0429
Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to search.asp, (2) …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Active Bids - 'search' SQL Injection2009-01-15 · webapps · asp · Verified
Impact
Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to search.asp, (2) SortDir parameter to auctionsended.asp, and the (3) catid parameter to wishlist.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Activewebsoftwares | Active Bids | All versions |