CVE-2009-4436

Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to…

published December 28, 2009

CVSS
—
EPSS
1%
Percentile
61.6
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp, different vectors than CVE-2007-1706.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00971 · 61.6th percentile
Published
2009-12-28T18:27Z
EPSS history
Timeline
  • 28 DEC 18:27Z
    Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to…
    cvelistv5