CVE-2019-9063

The CVE-2019-9063 entry concerns PHP Scripts Mall Auction website script version 2.0.4, where an input validation vulnerability allows parameter tampering of the payment amount. Connected CNVD/NVD records describe an input validation flaw enabling modification of the donation/paid amount; exploit...

CVE-2019-9063

PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount...

auction-world.co XSS vulnerability

Open Bug Bounty ID: OBB-713900 Description| Value ---|--- Affected Website:| auction-world.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Three-Rotor Enigma Machine Up for Auction Today

Sotheby's is auctioning off a working, I think three-rotor Enigma machine today. They're expecting it to sell for about $200K. I have an Enigma, but it's missing the rotors...

CVE-2018-17378

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17376

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filterorderDir, cat, or filterletter parameter...

CVE-2018-17376

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filterorderDir, cat, or filterletter parameter...

Sql injection

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filterorderDir, cat, or filterletter parameter...

Sql injection

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17378

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17376

CVE-2018-17376 affects Joomla! Reverse Auction Factory 4.3.8; SQL injection via filter_order_Dir, cat, or filter_letter in listauctions. Public exploits exist (Exploit-DB) and the CVSS v3 base score is 9.8 (CRITICAL). No patch/version remediation details are provided in the supplied documents.

CVE-2018-17378

The CVE-2018-17378 entry describes a SQL injection vulnerability in Joomla! Penny Auction Factory 2.0.4, exploitable via the filter_order_Dir or filter_order parameters. Affected component: Penny Auction Factory 2.0.4 for Joomla!. Root cause: unsanitized user input in query construction leading t...

CVE-2018-17376

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filterorderDir, cat, or filterletter parameter...

Component Dutch Auction Factory 'filter_order_Dir' SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Dutch Auction Factory 'filterorderDir' component of Joomla! An attacker can insert SQL commands into the query string of a web form...

Component Auction Factory 'filter_order' SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Joomla! component Auction Factory 'filterorder', which can be exploited by attackers to obtain sensitive database information...

Component Reverse Auction Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Reverse Auction Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form...

Penny Auction Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Penny Auction Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form...

Joomla! Component Dutch Auction Factory 2.0.2 - filter_order_Dir SQL Injection

Joomla! Component Dutch Auction Factory 2.0.2 - filterorderDir SQL Injection Exploit Title: Joomla! Component Dutch Auction Factory 2.0.2 - 'filterorderDir' SQL Injection Dork: N/A Exploit Author: Ihsan Sencan Date: 2018-09-24 Vendor Homepage: https://thephpfactory.com/ Software Link:...

Joomla! Dutch Auction Factory 2.0.2 SQL Injection

Exploit Title: Joomla! Component Dutch Auction Factory 2.0.2 - 'filterorderDir' SQL Injection Dork: N/A Exploit Author: Ihsan Sencan Date: 2018-09-24 Vendor Homepage: https://thephpfactory.com/ Software Link:...

Joomla! Component Penny Auction Factory 2.0.4 - SQL Injection

Joomla! Component Penny Auction Factory 2.0.4 - SQL Injection Exploit Title: Joomla! Component Penny Auction Factory 2.0.4 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: https://thephpfactory.com/ Software Link:...