AJ Auction 1.0 - (id) Remote SQL Injection Vulnerability

No description provided by source. AJ Auction OOPD V.1 SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = hussin.xathotmailDoTcom = =...

CVE-2007-1298

CVE-2007-1298 describes an SQL injection in subcat.php of AJ Auction 1.0, exploitable via the cate_id parameter. The root cause is improper handling of user input leading to arbitrary SQL execution on remote systems. The affected component is AJ Auction 1.0, specifically the subcat.php script; im...