CVE-2008-2860

SQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote attackers to execute arbitrary SQL commands via the cateid parameter...

CVE-2008-2860

CVE-2008-2860 affects AJSquare AJ Auction Pro web 2.0. The vulnerability is in category.php and allows SQL injection via the cate_id parameter, enabling remote attackers to execute arbitrary SQL commands. The CVSS data from NVD indicates a network-accessible, low-complexity, no-authentication vul...

CVE-2008-2860

creationtimestamp| type| source ---|---|--- 2008-06-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5867...

CVE-2007-2860

Summary (CVE-2007-2860): BoastMachine 3.0 platinum’s user.php allows privilege escalation for remote authenticated users by tampering the id parameter, as demonstrated by an edit_post action. The NVD entry lists a network attack with low complexity and partial confidentiality/integrity/availabili...

CVE-2006-2860

CVE-2006-2860 is a PHP remote file inclusion vulnerability in Webspotblogging 3.0.1. An attacker can trigger arbitrary PHP code execution by supplying a URL in the path parameter to one of four files: inc/logincheck.inc.php, inc/adminheader.inc.php, inc/global.php, or inc/mainheader.inc.php. The ...

CVE-2005-2860

Cross-site scripting XSS vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report...