Sql injection

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-1712

CVE-2007-1712 affects ActiveWebSoftwares Active Auction Pro 7.1. A SQL injection flaw in default.asp allows remote attackers to execute arbitrary SQL commands via the catid parameter. This can impact database integrity and confidentiality as described. No remediation details are provided in the s...

Active Auction Remote SQL Injection Vulnerability

Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

aar-sql.txt

Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

Active Auction Pro 7.1 (default.asp catid) SQL Injection Vulnerability

No description provided by source. Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

Active Auction Pro 7.1 - default.asp?catid SQL Injection

Active Auction Pro 7.1 - default.asp?catid SQL Injection Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

Active Auction Pro 7.1 - 'default.asp?catid' SQL Injection

Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

Active Auction Pro 7.1 (default.asp catid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Active Auction Pro 7.1 default.asp catid SQL Injection Vulnerability ====================================================================== Title : Active Auction Remot...

Top Auction 1.0 (viewcat.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== Top Auction 1.0 viewcat.php Remote SQL Injection Exploit ========================================================== !/usr/bin/perl Script Name: Top Auction 1.0 viewcat.php Remote...

Top Auction 1.0 - 'viewcat.php' SQL Injection

!/usr/bin/perl Script Name: Top Auction 1.0 viewcat.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.phplabs.com $$ : 39.95$ .. : ajann,Turkey use IO::Socket; if@ARGV : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are...

CVE-2007-1298

SQL injection vulnerability in subcat.php in AJ Auction 1.0 allows remote attackers to execute arbitrary SQL commands via the cateid parameter...

CVE-2007-1298

CVE-2007-1298 describes an SQL injection in subcat.php of AJ Auction 1.0, exploitable via the cate_id parameter. The root cause is improper handling of user input leading to arbitrary SQL execution on remote systems. The affected component is AJ Auction 1.0, specifically the subcat.php script; im...

AJ Auction Pro All Versions (subcat.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: AJ Auction All Version subcat.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.ajsquare.com Dork : "/subcat.php?cateid=" $$ : 250.00 USD .. : ajann,Turkey use IO::Socket; if@ARGV 1...

AJ Auction Pro All Versions (subcat.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================================== AJ Auction Pro All Versions subcat.php Remote SQL Injection Exploit ===================================================================== !/usr/bin/perl Script Name: AJ...

AJ Auction Pro - subcat.php SQL Injection

AJ Auction Pro - subcat.php SQL Injection !/usr/bin/perl Script Name: AJ Auction All Version subcat.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.ajsquare.com Dork : "/subcat.php?cateid=" $$ : 250.00 USD .. : ajann,Turkey use IO::Socket;...

AJ Auction Pro - 'subcat.php' SQL Injection

!/usr/bin/perl Script Name: AJ Auction All Version subcat.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.ajsquare.com Dork : "/subcat.php?cateid=" $$ : 250.00 USD .. : ajann,Turkey use IO::Socket; if@ARGV : "; $dir = ; chop $dir; if $dir =...

CVE-2006-7005

SQL injection vulnerability in item.php in PSY Auction allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-7004

Cross-site scripting XSS vulnerability in emailrequest.php in PSY Auction allows remote attackers to inject arbitrary web script or HTML via the userid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-7004

The CVE-2006-7004 entry documents a Cross-site Scripting (XSS) vulnerability in the PSY Auction project, specifically in email_request.php, exploitable via the user_id parameter. The vulnerability description indicates that remote attackers can inject arbitrary web script or HTML, implying potent...

CVE-2006-7005

The CVE-2006-7005 entry describes an SQL injection in PSY Auction’s item.php, exploitable via the id parameter to allow remote execution of arbitrary SQL. The vulnerability is triggered through a manipulable id value, leading to partial confidentiality, integrity, and availability impact as per t...