EUVD-2009-3318

Malware in sbrugna...

Sql injection

SQL injection vulnerability in auctiondetails.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL commands via the auctionid parameter...

CVE-2009-3336

CVE-2009-3336 describes an SQL injection in auction_details.php of PHP Pro Bid, exploitable via the auction_id parameter to allow remote SQL execution. The vulnerability is confirmed by multiple sources (NVD, CVE list, PRION/CVELIST) with a base score of 7.5 (HIGH). The connected documents do not...