EUVD-2008-5973

Malware in sbrugna...

CVE-2008-6966

AJ Square AJ Auction Pro Platinum Skin 1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php...

Authentication flaw

AJ Square AJ Auction Pro Platinum Skin 1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php...

CVE-2008-6966

The CVE-2008-6966 entry concerns AJ Square AJ Auction Pro Platinum Skin #1, where a redirect is not exited when accessed directly, enabling a remote attacker to bypass authentication via a direct request to admin/user.php. The issue is tied to improper flow control after a redirect, allowing an a...

CVE-2008-6966

AJ Square AJ Auction Pro Platinum Skin 1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php...

CVE-2008-6966: Undefined Security Weakness

AJ Square AJ Auction Pro Platinum Skin 1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php...

CVE-2008-6414

SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sql injection

SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-6414: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sql injection

SQL injection vulnerability in sellersothersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the sellerid parameter...

CVE-2008-6004

CVE-2008-6004 is a Cross-site scripting (XSS) vulnerability affecting AJ Auction Pro Platinum 2, specifically in search.php via the product parameter. The NVD entry describes an attacker injecting arbitrary script/HTML, with a CVSSv2 base score of 4.3 (Medium) and vector: AV:N/AC:M/Au:N/C:N/I:P/A...

CVE-2008-6003

SQL injection vulnerability in sellersothersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the sellerid parameter...

CVE-2008-6003

CVE-2008-6003 is an SQL injection vulnerability in AJ Auction Pro Platinum 2’s sellers_othersitem.php, exploitable via the seller_id parameter to allow remote attackers to execute arbitrary SQL commands. The NVD entry lists this as a NETWORK attack with HIGH impact on confidentiality and integrit...

CVE-2008-6003: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in sellersothersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the sellerid parameter...

CVE-2008-6004: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to inject arbitrary web script or HTML via the product parameter...

AJ Auction Pro Platinum - seller_id SQL Injection

AJ Auction Pro Platinum - sellerid SQL Injection |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // |...

AJ Auction Pro Platinum (seller_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== AJ Auction Pro Platinum sellerid SQL Injection Vulnerability ===============================================================...

AJ Auction Pro Platinum - 'seller_id' SQL Injection

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| Xss /Remote SQL injection...

AJ Auction Pro Platinum Skin #2 (detail.php item_id) SQL Injection ulnerability

No description provided by source. AJ Auction Pro Platinum Skin 2 detail.php itemid Remote SQL Injection Vulnerability POC : /detail.php?itemid=-1+UNION+SELECT+1,2,3,4,concatusername,0x3a,password, 6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35...

AJ Auction Pro Platinum Skin #2 (detail.php item_id) SQL Injection Vuln

Exploit for unknown platform in category web applications ======================================================================= AJ Auction Pro Platinum Skin 2 detail.php itemid SQL Injection Vuln ======================================================================= AJ Auction Pro Platinum Ski...