Active Bids, a software developed by www.activewebsoftwares.com, is vulnerable to a Remote Blind SQL Injection vulnerability. This vulnerability can be exploited by sending a maliciously crafted HTTP request to the vulnerable server. An attacker can use this vulnerability to gain access to sensitive information stored in the database, such as usernames and passwords. The vulnerability can be exploited by sending a maliciously crafted HTTP request to the vulnerable server, such as http://site.il/activebids/bidhistory.asp?ItemID=354%20and%201=1 and http://site.il/activebids/bidhistory.asp?ItemID=354%20and%201=0. An attacker can use this vulnerability to gain access to sensitive information stored in the database, such as usernames and passwords.