RSS   Vulnerabilities for 'Active business directory'   RSS

2009-12-30
 
CVE-2009-4464

CWE-79
 

 
Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

 
2009-01-26
 
CVE-2008-5972

CWE-89
 

 
SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter.

 

 >>> Vendor: Activewebsoftwares 18 Products
Active auction house
Active photo gallery
Active newsletter
Active trade
Ewebquiz
Activevotes
Active ewebquiz
Active time billing
Active force matrix
Active membership
Active price comparison
Active bids
Active test
Active business directory
Active web mail
Active web helpdesk
Quick tree view .net
Aspreferral


Copyright 2024, cxsecurity.com

 

Back to Top