Vulnerabilities > Activewebsoftwares > Active Business Directory > 2

DATE CVE VULNERABILITY TITLE RISK
2009-01-27 CVE-2008-5972 SQL Injection vulnerability in Activewebsoftwares Active Business Directory 2
SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
network
low complexity
activewebsoftwares CWE-89
7.5