CVE-2007-5999

CVE-2007-5999 : SQL injection in the Softbiz Auctions Script, via the id parameter in product_desc.php. The issue stems from unsafely constructed SQL in this script, allowing remote attackers to execute arbitrary SQL commands. Public references indicate exploit availability and fixes are not deta...

softbiz1-sql.txt

Softbiz Auctions Script Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ Google Dork : "Starting bid" "Powered by SoftbizScripts" Injection Adress : http://sitename/productdesc.php?id= SQL C0de :...

Softbiz Auctions Script product_desc.php Remote SQL Injection Vuln

No description provided by source. Softbiz Auctions Script Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ Google Dork : "Starting bid" "Powered by SoftbizScripts" Injection Adress : http://sitename/productdesc.php?id=SQL C0de SQL C0de :...

Softbiz Auctions Script - 'product_desc.php' SQL Injection

Softbiz Auctions Script Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ Google Dork : "Starting bid" "Powered by SoftbizScripts" Injection Adress : http://sitename/productdesc.php?id= SQL C0de :...

Softbiz Auctions Script - product_desc.php SQL Injection

Softbiz Auctions Script - productdesc.php SQL Injection Softbiz Auctions Script Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ Google Dork : "Starting bid" "Powered by SoftbizScripts" Injection Adress : http://sitename/productdesc.php?id= SQL...

Softbiz Auctions Script product_desc.php Remote SQL Injection Vuln

Exploit for unknown platform in category web applications ================================================================== Softbiz Auctions Script productdesc.php Remote SQL Injection Vuln ================================================================== Softbiz Auctions Script Sql Injection B...

dc_metabid_sqlinj.txt

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Multiple SQL Injections in MetaB...

CVE-2005-1364

Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password fields in logIn.asp, or 3 intAuctionID parameter to item.asp...

CVE-2005-1364

CVE-2005-1364 describes multiple SQL injection vulnerabilities in MetaBid Auctions that allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parameter to item.asp. The initial and connected documents confirm a SQLi ...

Multiple SQL Injections in MetaBid Auctions

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Multiple SQL Injections in MetaB...

MetaBid Auctions - 'intAuctionID' SQL Injection

source: https://www.securityfocus.com/bid/13395/info A remote SQL injection vulnerability affects MetaBid Auctions. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker may exploit this issue to manipulate SQL...

MetaBid Auctions - intAuctionID SQL Injection

MetaBid Auctions - intAuctionID SQL Injection source: https://www.securityfocus.com/bid/13395/info A remote SQL injection vulnerability affects MetaBid Auctions. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An...