Ultimate Auction 3.67 - Item.pl Cross-Site Scripting

Ultimate Auction 3.67 - Item.pl Cross-Site Scripting source: https://www.securityfocus.com/bid/16239/info Ultimate Auction is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

CVE-2005-4237

Cross-site scripting XSS vulnerability in MySQL Auction 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keyword parameter in the SearchZoom module...

CVE-2005-4237

CVE-2005-4237 affects MySQL Auction 3.0 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in the search functionality, with parameters in the SearchZoom module (potentially the keyword parameter) allowing remote injection of arbitrary script/HTML. Exploitability and impact are d...

CVE-2005-4237: Undefined Security Weakness

Cross-site scripting XSS vulnerability in MySQL Auction 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keyword parameter in the SearchZoom module...

MySQL Auction XSS vuln.

MySQL Auction XSS vuln. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/mysql-auction-xss-vuln.html vendor:mysqlauction.com affected version: 3.0 and prior Product Description: Full featured, MySQL database driven online auction software. Features...

Microsoft Excel 95972000200220032004 - Malformed Range Memory Corruption

Microsoft Excel 95972000200220032004 - Malformed Range Memory Corruption source: https://www.securityfocus.com/bid/15780/info Microsoft Excel is susceptible to a remote code-execution vulnerability. This issue was originally disclosed through an eBay auction that has since been terminated. This...

Microsoft Excel 95/97/2000/2002/2003/2004 - Malformed Range Memory Corruption

source: https://www.securityfocus.com/bid/15780/info Microsoft Excel is susceptible to a remote code-execution vulnerability. This issue was originally disclosed through an eBay auction that has since been terminated. This issue is due to the application's failure to properly bounds-check...

CVE-2005-3952

CVE-2005-3952 describes an SQL injection in PHP Labs Top Auction. The vulnerability affects the viewcat.php script and could allow remote attackers to modify or retrieve data via the (1) category, (2) type parameters, or (3) certain search parameters. The root cause is unsafely handled user input...

CVE-2005-3952

SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the 1 category and 2 type parameters to viewcat.php, or 3 certain search parameters. NOTE: later a disclosure reported the affected version as 1.0...

CVE-2005-3952: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the 1 category and 2 type parameters to viewcat.php, or 3 certain search parameters. NOTE: later a disclosure reported the affected version as 1.0...

Top Auction Multiple SQL Vuln.

Top Auction Multiple SQL Vuln. Vuln. dicovered by : r0t Date 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/top-auction-multiple-sql-vuln.html Vendor:http://www.phplabs.com/ Product link:http://www.phplabs.com/scripts.php?script=Top20Auction affected version: Top Auction last...

Phpauction <= 2.5 Multiple Vulnerabilities

The remote host is running Phpauction or one of its affiliate versions, such as Web2035 Auction. Phpauction is a web-based auction system written in PHP. The version of Phpauction on the remote host suffers from multiple flaws : - Remote Code Execution An attacker can control the 'lan' variable...

CVE-2005-1234

Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the 1 u parameter to auctionrating.php or 2 ar parameter to actionoffer.php...

CVE-2005-1235

auctionmyauctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode parameter, which leaks the full path in a PHP error message...

CVE-2005-1234

CVE-2005-1234 : Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via (1) the u parameter to auction_rating.php or (2) the ar parameter to action_offer.php. These entries describe the affected product as phpbb-Auction and identify the...

CVE-2005-1235

auctionmyauctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode parameter, which leaks the full path in a PHP error message...

CVE-2005-1235

The CVE concerns phpbb-Auction 1.2m and earlier, where auction_my_auctions.php accepts an invalid mode parameter and, via a PHP error message, leaks the full path. This is a potential information disclosure vulnerability in the PHP code path handling the auction feature. The provided documents do...

CVE-2005-1234

Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the 1 u parameter to auctionrating.php or 2 ar parameter to actionoffer.php...

CVE-2005-1235: Undefined Security Weakness

auctionmyauctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode parameter, which leaks the full path in a PHP error message...

CVE-2005-1234: Undefined Security Weakness

Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the 1 u parameter to auctionrating.php or 2 ar parameter to actionoffer.php...