Active Auction House Cross Site Scripting

--------------------------------------------------------- Portal Name: Active Auction House Vendor : http://www.activewebsoftwares.com/P24ActiveAuctionHouse.aspx?Tabopen=1 Author : PouyaServer , [email protected] Aria-Security.Net Vulnerability : CM...

Active Bids - 'search' SQL Injection

source: https://www.securityfocus.com/bid/33306/info Active Auction House and Active Auction Pro are prone to SQL-injection and cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

PHP Auction System Remote File Inclusion

»=======================================================================================================-X » » » PHPAuctionSystem Multiple Remote File Inclusion Vulnerability » » » » ======= ------d-------m------ ==== ==== » » || = | |o o| | || || || » » || = |||| || || » » ======= /|\ || || »...

PHP Auction System Insecure Cookie Handling

PHPAuctionSystem Insecure Cookie Handling Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 05.01.09 Home: z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : EN ONEMLi N0T: demolarI hackleyen top...

PHPAuctionSystem - Multiple Remote File Inclusions

PHPAuctionSystem - Multiple Remote File Inclusions »=======================================================================================================-X » » » PHPAuctionSystem Multiple Remote File Inclusion Vulnerability » » » » ======= ------d-------m------ ==== ==== » » || = | |o...

PHP Auction System XSS / SQL Injection

PHPAuctionSystem Author:x0r Email:[email protected] Cms:PhpAuctionSystemvnew Cmsprice:$59.99 Demo:http://www.phpauctions.info/demo/ BugIn:\profile.phpBlind\Normal Sql Injection ExploitBlind: profile.php?userid=29%20and%20substring@@version,1,1=5--...

PHPAuctionSystem Multiple Remote File Inclusion Vulnerabilities

No description provided by source. »=======================================================================================================-X » » » PHPAuctionSystem Multiple Remote File Inclusion Vulnerability » » » » ======= ------d-------m------ ==== ==== » » || = | |o o| | || || || Â...

CF_Auction - Blind SQL Injection

CFAuction - Blind SQL Injection -------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : CFAUCTION download : null Demo : http://www.cfwebsite.com/ Exploits : --=BLIND SQL INJECTION=--...

CF_Auction - Blind SQL Injection

-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : CFAUCTION download : null Demo : http://www.cfwebsite.com/ Exploits : --=BLIND SQL INJECTION=--...

CVE-2008-5212

SQL injection vulnerability in classifidead.php in AJ Auction 6.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-5212

CVE-2008-5212 describes an SQL injection in AJ Auction 6.2.1 and earlier, via the item_id parameter in classifide_ad.php. The vulnerability allows remote attackers to execute arbitrary SQL commands. The NVD metrics list a base score of 7.5 (HIGH) with network attack vector, low complexity, no aut...

CVE-2008-5212

SQL injection vulnerability in classifidead.php in AJ Auction 6.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

ajauction-bypass.txt

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...

AJ Auction Authentication Bypass Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

AJ Auction - Authentication Bypass

AJ Auction - Authentication Bypass ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

AJ Auction Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ============================================== AJ Auction Authentication Bypass Vulnerability ============================================== ============================================================================== AJ Auction Auth...

AJ Auction - Authentication Bypass

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...

sfsezauction-sql.txt

Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : SFS EZ Auction Remote Blind sql injection Home Script : http://www.scripts-for-sites.info/item.php?item=97 Greetz : Allah , All my freind P0c : http://localhost/viewfaqs.php?cat=1+and+1...

SFS EZ Auction (viewfaqs.php cat) Blind SQL Injection Vulnerability

No description provided by source. Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : SFS EZ Auction Remote Blind sql injection Home Script : http://www.scripts-for-sites.info/item.php?item=97 Greetz : Allah , All my freind P0c :...

SFS EZ Auction (viewfaqs.php cat) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== SFS EZ Auction viewfaqs.php cat Blind SQL Injection Vulnerability =================================================================== Kira has decide be back after hallowe...