EUVD-2009-3318

Malware in sbrugna...

Sql injection

SQL injection vulnerability in auctiondetails.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL commands via the auctionid parameter...

CVE-2009-3336

CVE-2009-3336 describes an SQL injection in auction_details.php of PHP Pro Bid, exploitable via the auction_id parameter to allow remote SQL execution. The vulnerability is confirmed by multiple sources (NVD, CVE list, PRION/CVELIST) with a base score of 7.5 (HIGH). The connected documents do not...

CVE-2009-3336: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in auctiondetails.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL commands via the auctionid parameter...