Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-5958. PoCs published by R3d-D3V!L.
AI-analyzed exploit summary This is a writeup describing a blind SQL injection vulnerability in Active Test v2.1. It provides example URLs and conditions to test for the vulnerability but does not include functional exploit code.
Description
Multiple SQL injection vulnerabilities in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp.
Exploits (1)
This is a writeup describing a blind SQL injection vulnerability in Active Test v2.1. It provides example URLs and conditions to test for the vulnerability but does not include functional exploit code.