EUVD-2013-6976

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 pa parameter to auction/asp/list.asp, or the 2 UserID or 3 Password to auction/casp/admin.asp...

CVE-2013-7193

Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 pa parameter to auction/asp/list.asp, or the 2 UserID or 3 Password to auction/casp/admin.asp...

CVE-2013-7193

CVE-2013-7193 affects the C2C Forward Auction Creator 2.0. Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via the (1) pa parameter to auction/asp/list.asp, or the (2) UserID or (3) Password to auction/casp/admin.asp. The NVD entry documents remote ...

PT-2013-6293

Name of the Vulnerable Software and Affected Versions C2C Forward Auction Creator version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the pa parameter to the "auction/asp/list.asp" API endpoint, or the UserID or Password parameters...

CVE-2013-7193: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 pa parameter to auction/asp/list.asp, or the 2 UserID or 3 Password to auction/casp/admin.asp...

C2C Forward Auction Creator 2.0 - auctionasplist.asp?pa SQL Injection

C2C Forward Auction Creator 2.0 - auctionasplist.asp?pa SQL Injection source: https://www.securityfocus.com/bid/64329/info EtoShop C2C Forward Auction Creator is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL...

C2C Forward Auction Creator 2.0 - '/auction/asp/list.asp?pa' SQL Injection

source: https://www.securityfocus.com/bid/64329/info EtoShop C2C Forward Auction Creator is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. An attacker can exploit these issues by manipulating the SQL...