Active Auction Pro 7.1 (default.asp catid) SQL Injection Vulnerability

No description provided by source. Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

Active Auction Pro 7.1 (default.asp catid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Active Auction Pro 7.1 default.asp catid SQL Injection Vulnerability ====================================================================== Title : Active Auction Remot...

Active Auction Pro 7.1 - default.asp?catid SQL Injection

Active Auction Pro 7.1 - default.asp?catid SQL Injection Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

Active Auction Pro 7.1 - 'default.asp?catid' SQL Injection

Title : Active Auction Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactiveauction Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=1 Vuln. Username :...

Top Auction 1.0 (viewcat.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== Top Auction 1.0 viewcat.php Remote SQL Injection Exploit ========================================================== !/usr/bin/perl Script Name: Top Auction 1.0 viewcat.php Remote...

Top Auction 1.0 - 'viewcat.php' SQL Injection

!/usr/bin/perl Script Name: Top Auction 1.0 viewcat.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.phplabs.com $$ : 39.95$ .. : ajann,Turkey use IO::Socket; if@ARGV : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are...

CVE-2007-1298

SQL injection vulnerability in subcat.php in AJ Auction 1.0 allows remote attackers to execute arbitrary SQL commands via the cateid parameter...

CVE-2007-1298

CVE-2007-1298 describes an SQL injection in subcat.php of AJ Auction 1.0, exploitable via the cate_id parameter. The root cause is improper handling of user input leading to arbitrary SQL execution on remote systems. The affected component is AJ Auction 1.0, specifically the subcat.php script; im...

AJ Auction Pro All Versions (subcat.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: AJ Auction All Version subcat.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.ajsquare.com Dork : "/subcat.php?cateid=" $$ : 250.00 USD .. : ajann,Turkey use IO::Socket; if@ARGV 1...

AJ Auction Pro - subcat.php SQL Injection

AJ Auction Pro - subcat.php SQL Injection !/usr/bin/perl Script Name: AJ Auction All Version subcat.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.ajsquare.com Dork : "/subcat.php?cateid=" $$ : 250.00 USD .. : ajann,Turkey use IO::Socket;...

AJ Auction Pro All Versions (subcat.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================================== AJ Auction Pro All Versions subcat.php Remote SQL Injection Exploit ===================================================================== !/usr/bin/perl Script Name: AJ...

AJ Auction Pro - 'subcat.php' SQL Injection

!/usr/bin/perl Script Name: AJ Auction All Version subcat.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.ajsquare.com Dork : "/subcat.php?cateid=" $$ : 250.00 USD .. : ajann,Turkey use IO::Socket; if@ARGV : "; $dir = ; chop $dir; if $dir =...

CVE-2006-7005

SQL injection vulnerability in item.php in PSY Auction allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-7005

The CVE-2006-7005 entry describes an SQL injection in PSY Auction’s item.php, exploitable via the id parameter to allow remote execution of arbitrary SQL. The vulnerability is triggered through a manipulable id value, leading to partial confidentiality, integrity, and availability impact as per t...

CVE-2006-7004

Cross-site scripting XSS vulnerability in emailrequest.php in PSY Auction allows remote attackers to inject arbitrary web script or HTML via the userid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-7005

SQL injection vulnerability in item.php in PSY Auction allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-7004

The CVE-2006-7004 entry documents a Cross-site Scripting (XSS) vulnerability in the PSY Auction project, specifically in email_request.php, exploitable via the user_id parameter. The vulnerability description indicates that remote attackers can inject arbitrary web script or HTML, implying potent...

BBS E-Market Professional (Path Disclosure/Include) Multiple Vulns

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV06$2004 --------------------------------------------------------------------------- Multiple vulnerabilities 1n BBS E-Market Professional...

CVE-2006-3940

Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via 1 the ar parameter in auctionroom.php and 2 the u parameter in auctionstore.php. NOTE: the auctionrating.php vector is already covered by CVE-2005-1234. NOTE: the original disclosu...

CVE-2006-3940

CVE-2006-3940 concerns multiple SQL injection vulnerabilities in the phpbb-Auction package. The affected components, as described in the provided documents, allow remote attackers to execute arbitrary SQL commands via the following parameters: (1) ar in auction_room.php and (2) u in auction_store...