VendorsActivewebsoftwaresactive_business_directoryall versions
Vulnerabilities

Activewebsoftwares Active Business Directory

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2008-5972
SQL injection vulnerability in default.asp in Active Business Directory 2 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
Published 2009-01-27 · Modified
7.51 PoCEPSS 0.010
CVE-2009-4464
Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Published 2009-12-30 · Modified
4.31 PoCEPSS 0.015