Ultimate Auction 3.67 ItemList.PL Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16254/info Ultimate Auction is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitra...

Ajax PHP Penny Auction 1.x 2.x - Multiple Vulnerabilities

No description provided by source. Ajax PHP Penny Auction 1.x 2.x multiple Vulnerabilities Found by : Taha Hunter Info : Ajax PHP Penny Auction is one of the most proven and reliable Penny Auction software options available on the market. Based on a proprietary AJAX Streaming Engine which has fou...

AJ Auction Pro Platinum - (seller_id) SQL Injection Vulnerability

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ \L\ \ | | \ \ \ \\ \ \ /\ \\ \\ /\ \...

AJ Auction Pro Platinum Skin - (detail.php item_id) SQL Injection Vuln

No description provided by source. AJ Auction Pro Platinum Skin 2 detail.php itemid Remote SQL Injection Vulnerability POC : /detail.php?itemid=-1+UNION+SELECT+1,2,3,4,concatusername,0x3a,password, 6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35...

Webid 1.0.6 - Multiple Vulnerabilities

No description provided by source. Title: Webid Blind SQL Injection / Local File Disclosure Vulnerability Google Dork: intext:Powered by WeBid Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Vendor: http://www.webidsupport.com/ Software Link:...

Greatclone GC Auction Platinum 'category.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30389/info GC Auction Platinum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

BS Auction <= SQL Injection Vulnerability Exploit

No description provided by source. ----------------------------Information------------------------------------------------ +Name : BS Auction = SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 06.07.2010 +Script : BS Auction +Price : $24.95 +Language :PHP +Exploi...

Auction_Software Script Admin Login Bypass vulnerability

No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : AuctionSoftware Script Admin Login Bypass vulnerability vendor URL :http://www.brotherscripts.com/ Price: $24.95 Author : altbta l9athotmail.com dork : PHPAuction GPL Enhanced V2.51 ...

Guru Auction 2.0 - Multiple SQL Injection Vulnerabilities

No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

Anserv Auction XL (viewfaqs.php cat) - SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV92$2008 ----------------------------------------------------------------------------------------- ECHOADV92$2008 Anserv Auction XL viewfaqs.php cat Blind Sql Injection...

Active Auction House WatchThisItem.ASP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13039/info Active Auction House is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this iss...

U.S. Marshals Auctioning Off Seized Silk Road Bitcoins

If any further evidence was required that up is down and black is white, the United States government is now in the business of selling Bitcoins. At least for one day. The U.S. Marshals Service is planning to hold a one-day auction on June 27 to sell nearly 30,000 Bitcoins the government seized i...

U.S. Judge ordered the largest Ever Forfeiture of 29,655 Bitcoins seized from Silk Road

In last October, the Feds told they would probably just liquidate the bitcoins seized from the online black market Silk Road, once they were legally free to do so. Finally the United States District Judge J. Paul Oetken signed off on the forfeiture order for the Bitcoins, clearing the government ...

WeBid Local File Discolure vulnerability

+Description: Open source php/mysql fully featured auction script. Perfect for those who want to start their own auction site. +Exploit: Acal Suffers from an LFD vulnerability: Usage Info 127.0.0.1/PATH/WEBID/loader.php?js=LFD + Author: TUNISIAN CYBER + Exploit Title: WeBid all versions LFD...

eBay Open to Cross-Site Request Forgery, Account Hijacking

EBay is vulnerable to a hack that would allow an attacker to hijack an account and make unauthorized purchases from the victim’s account that would be difficult to disprove. The vulnerability was discovered and reported to eBay in August, and despite three separate communications from the online...

CVE-2013-7193

Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 pa parameter to auction/asp/list.asp, or the 2 UserID or 3 Password to auction/casp/admin.asp...

Sql injection

Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 pa parameter to auction/asp/list.asp, or the 2 UserID or 3 Password to auction/casp/admin.asp...

CVE-2013-7193

CVE-2013-7193 affects the C2C Forward Auction Creator 2.0. Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via the (1) pa parameter to auction/asp/list.asp, or the (2) UserID or (3) Password to auction/casp/admin.asp. The NVD entry documents remote ...

CVE-2013-7193

Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 pa parameter to auction/asp/list.asp, or the 2 UserID or 3 Password to auction/casp/admin.asp...

Lowest Unique Bid Auction - SQL Injection

Lowest Unique Bid Auction - SQL Injection | \ | | | | / | | | | | | | | | | // \ \ / / | | | | | | |/ | ' \ \ \ / / | | | \ \ /\ V / | | || | || | | | | | | / || \| / /||,|||/|| || |/ || Lowest unique bid auction, SQLi Vulnerabilities Product Page:...