Vulnerabilities > Activewebsoftwares > Active Newsletter > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-02-25 | CVE-2008-6286 | SQL Injection vulnerability in Activewebsoftwares Active Newsletter 4.3 Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via (1) the email parameter (aka username or E-mail field), or (2) the password parameter (aka password field), to (a) Subscriber.asp or (b) start.asp. | 7.5 |