CVE-2008-6286

no score yetEPSS 1.0%

activewebsoftwares active newsletter: no CVSS score yet. EPSS 1.0% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via (1) the email parameter (aka username or E-mail field), or (2) the password parameter (aka password field), to (a) Subscriber.asp or (b) start.asp. NOTE: some of these details are obtained from third party information.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2009-02-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

activewebsoftwares:active_newsletter

References

http://secunia.com/advisories/32908
https://exchange.xforce.ibmcloud.com/vulnerabilities/46916
https://www.exploit-db.com/exploits/7280
http://secunia.com/advisories/32908
https://exchange.xforce.ibmcloud.com/vulnerabilities/46916

Check your stack JSON