PHPAuction 2.1 (phpAds_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ PHPAuction 2.1 phpAdspath Remote File Inclusion Vulnerability ================================================================...

phpAuction 2.1 - 'phpAds_path' Remote File Inclusion

+-------------------------------------------------------------------- + + PHPAuction 2.1 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: PHPAuction 2.1 maybe higher + Venedor ...........: http://www.phpauction.net, + Class...

phpauction Admin Authentication Bypass

The remote host is running phpauction prior or equal to 2.0 or a modified version. There is a flaw when handling cookie-based authentication credentials which may allow an attacker to gain unauthorized administrative access to the auction system. SPDX-FileCopyrightText: 2005 Tobias Glemser...

Phpauction <= 2.5 Multiple Vulnerabilities

The remote host is running Phpauction or one of its affiliate versions, such as Web2035 Auction. Phpauction is a web-based auction system written in PHP. The version of Phpauction on the remote host suffers from multiple flaws : - Remote Code Execution An attacker can control the 'lan' variable...

PHPAuction Admin Authentication Bypass

The remote host is running PHPAuction, a web-based auction script written in PHP. There is a flaw in the version of PHPAuction installed on the remote host involving its handling of cookie-based authentication credentials. Using a specially crafted request, an unauthenticated, remote attacker can...

[SA15967] Phpauction GPL Multiple Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-2252

Summary (CVE-2005-2252): PhpAuction 2.5 is affected by an authentication bypass vulnerability where an attacker can set the PHPAUCTION_RM_ID cookie to a target user’s ID to gain privileges as that user. The Nessus plugin PHPAUCTION_MULT_VULNS.NASL documents this issue among others (e.g., RCE, SQL...

CVE-2005-2255

CVE-2005-2255 describes a directory traversal in PhpAuction 2.5 where an attacker can manipulate the lan parameter in index.php or admin/index.php to read arbitrary files, include local PHP files, or glean sensitive path information. The root cause is improper validation of the lan parameter allo...

CVE-2005-2252

PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTIONRMID cookie to the user ID...

CVE-2005-2252

PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTIONRMID cookie to the user ID...

CVE-2005-2254

Multiple cross-site scripting XSS vulnerabilities in PhpAuction 2.5 allow remote attackers to inject arbitrary web script or HTML via the lan parameter to 1 index.php or 2 admin/index.php, or 3 the auctionid parameter to profile.php. NOTE: there is evidence that viewnews.php and login.php may not...

CVE-2005-2253

CVE-2005-2253 is a SQL injection in PhpAuction 2.5, where an attacker can modify SQL queries through the category parameter in adsearch.php. Root cause: unsanitized input used in database queries. Affected: PhpAuction 2.5. Impact: as described by CVE/NVD (base score 7.5, HIGH). Exploitation detai...

CVE-2005-2254

The connected NASL/Nessus entry confirms CVE-2005-2254 affects Phpauction

CVE-2005-2255

Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain sensitive path information via ".." sequences in the lan parameter to 1 index.php or 2 admin/index.php...

CVE-2005-2253

SQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter to adsearch.php. NOTE: there is evidence that viewnews.php may not be part of the PhpAuction product, so it is not included in this description...

CVE-2005-2255

Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain sensitive path information via ".." sequences in the lan parameter to 1 index.php or 2 admin/index.php...

CVE-2005-2253

SQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter to adsearch.php. NOTE: there is evidence that viewnews.php may not be part of the PhpAuction product, so it is not included in this description...

CVE-2005-2255: Undefined Security Weakness

Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain sensitive path information via ".." sequences in the lan parameter to 1 index.php or 2 admin/index.php...

CVE-2005-2254: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PhpAuction 2.5 allow remote attackers to inject arbitrary web script or HTML via the lan parameter to 1 index.php or 2 admin/index.php, or 3 the auctionid parameter to profile.php. NOTE: there is evidence that viewnews.php and login.php may not...

CVE-2005-2252: Undefined Security Weakness

PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTIONRMID cookie to the user ID...