AJ Auction Pro OOPD 2.x SQL Injection

!/usr/bin/perl o AJ Auction Pro OOPD 2.x SQL Injection Exploit Software : AJ Auction Pro OOPD 2.x Vendor : http://www.ajsquare.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com o Usage root@noge: perl ajpro.pl www.target.com o Dork "Powered By AJ Auction Pr...

AJ Auction Pro OOPD 2.x - 'id' SQL Injection

!/usr/bin/perl o AJ Auction Pro OOPD 2.x SQL Injection Exploit Software : AJ Auction Pro OOPD 2.x Vendor : http://www.ajsquare.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com o Usage root@noge: perl ajpro.pl www.target.com o Dork "Powered By AJ Auction Pr...

CVE-2008-6965

AJ Square AJ Auction OOPD, Pro Platinum Skin 1, Pro Platinum Skin 2, and Web 2.0 send a redirect but do not exit when certain scripts are called directly, which allows remote attackers to bypass authentication via a direct request to 1 site.php, 2 auction.php, 3 mail.php, 4 feesetting.php, 5...

CVE-2008-6966

AJ Square AJ Auction Pro Platinum Skin 1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php...

Authentication flaw

AJ Square AJ Auction Pro Platinum Skin 1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php...

CVE-2008-6965

AJ Square AJ Auction OOPD, Pro Platinum Skin 1, Pro Platinum Skin 2, and Web 2.0 send a redirect but do not exit when certain scripts are called directly, which allows remote attackers to bypass authentication via a direct request to 1 site.php, 2 auction.php, 3 mail.php, 4 feesetting.php, 5...

CVE-2008-6966

AJ Square AJ Auction Pro Platinum Skin 1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php...

CVE-2008-6965

CVE-2008-6965 affects AJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, and Web 2.0. The issue is that a redirect is issued but the script does not exit when certain admin script files (site.php, auction.php, mail.php, fee_setting.php, earnings.php, insertion_fee_settings.php...

CVE-2008-6966

The CVE-2008-6966 entry concerns AJ Square AJ Auction Pro Platinum Skin #1, where a redirect is not exited when accessed directly, enabling a remote attacker to bypass authentication via a direct request to admin/user.php. The issue is tied to improper flow control after a redirect, allowing an a...

AJ Auction Pro OOPD 3.0 - txtkeyword Cross-Site Scripting

AJ Auction Pro OOPD 3.0 - txtkeyword Cross-Site Scripting source: https://www.securityfocus.com/bid/43273/info AJ Auction Pro OOPD is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execut...

Auction Website Script SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Auction Website Script cateid SQL Injection Vulnerability + Software : Auction Website Script + Author : 599eme Man + Contact : [email protected] + Thanks :...

Willscript Auction Website Script - category.php SQL Injection

Willscript Auction Website Script - category.php SQL Injection source: https://www.securityfocus.com/bid/43254/info Willscript Auction Website Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Willscript Auction Website Script - 'category.php' SQL Injection

source: https://www.securityfocus.com/bid/43254/info Willscript Auction Website Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to execute arbitrary code,...

AJ Auction Pro OOPD 3.0 - 'txtkeyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43273/info AJ Auction Pro OOPD is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

AJ Auction Pro 3.0 - txtkeyword Cross-Site Scripting

AJ Auction Pro 3.0 - txtkeyword Cross-Site Scripting source: https://www.securityfocus.com/bid/35968/info AJ Auction Pro is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...

AJ Auction Pro 3.0 - 'txtkeyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35968/info AJ Auction Pro is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

Sql injection

SQL injection vulnerability in viewfaqs.php in Scripts for Sites SFS EZ Auction allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6778

SQL injection vulnerability in viewfaqs.php in Scripts for Sites SFS EZ Auction allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6778

SQL injection vulnerability in viewfaqs.php in Scripts for Sites SFS EZ Auction allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6778

The CVE-2008-6778 issue is a SQL injection in viewfaqs.php of Scripts for Sites (SFS) EZ Auction. The vulnerability allows remote attackers to execute arbitrary SQL commands via the cat parameter. Documents confirm the affected component (viewfaqs.php) and the injection vector (cat parameter) wit...