Active Auction House Cross Site Scripting

--------------------------------------------------------- Portal Name: Active Auction House Vendor : http://www.activewebsoftwares.com/P24ActiveAuctionHouse.aspx?Tabopen=1 Author : PouyaServer , [email protected] Aria-Security.Net Vulnerability : CM...

Active Auction Pro XSS / SQL Injection

--------------------------------------------------------- Portal Name: Active Auction Pro Vendor : hhttp://www.activewebsoftwares.com/P1ActiveAuctionPro.aspx?Tabopen=1 Author : PouyaServer , [email protected] Aria-Security.Net Vulnerability : SQL/XSS...

Active Bids - 'search' SQL Injection

source: https://www.securityfocus.com/bid/33306/info Active Auction House and Active Auction Pro are prone to SQL-injection and cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

CVE-2007-1712

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-1712

CVE-2007-1712 affects ActiveWebSoftwares Active Auction Pro 7.1. A SQL injection flaw in default.asp allows remote attackers to execute arbitrary SQL commands via the catid parameter. This can impact database integrity and confidentiality as described. No remediation details are provided in the s...

Active Auction Remote SQL Injection Vulnerability

Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

aar-sql.txt

Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

Active Auction Pro 7.1 (default.asp catid) SQL Injection Vulnerability

No description provided by source. Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

Active Auction Pro 7.1 - default.asp?catid SQL Injection

Active Auction Pro 7.1 - default.asp?catid SQL Injection Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

Active Auction Pro 7.1 - 'default.asp?catid' SQL Injection

Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

Active Auction Pro 7.1 (default.asp catid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Active Auction Pro 7.1 default.asp catid SQL Injection Vulnerability ====================================================================== Title : Active Auction Remot...

CVE-2005-1030

Multiple cross-site scripting XSS vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the 1 ReturnURL, 2 password, 3 username parameter, 4 ReturnURL parameter to account.asp, 5 Table, 6 Title parameter to sendpassword.asp, or 7 itemid to...

CVE-2005-1030

CVE-2005-1030 affects the Active Auction House ASP application. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via parameters such as ReturnURL, password, username, and other fields (e.g., ReturnURL to...

CVE-2005-1029

CVE-2005-1029 : Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the ASP scripts and parameters: (1) default.asp with catid, SortDir, Sortby; (2) ItemInfo.asp with itemID; (3) sendpassword.asp with Email. Root cause: impro...

CVE-2005-1029

Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 SortDir, or 3 Sortby parameter to default.asp, 4 itemID parameter to ItemInfo.asp, or 5 Email field to sendpassword.asp...

Active Auction House Multiple Vulnerabilities

Binary data 2799.prm...

Active Auction Multiple Vulnerabilities (SQLi, XSS)

The remote host is running Active Auction, an auction software written in ASP. The remote version of this software is affected by various SQL injection and cross-site scripting issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

CVE-2005-1029

Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 SortDir, or 3 Sortby parameter to default.asp, 4 itemID parameter to ItemInfo.asp, or 5 Email field to sendpassword.asp...

Active Auction House - sendpassword.asp Multiple Cross-Site Scripting Vulnerabilities

Active Auction House - sendpassword.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13038/info Active Auction House is reportedly affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly...