CVE-2009-0430

Multiple cross-site scripting XSS vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter to search.asp and the 2 URL parameter to tellafriend.asp...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter to search.asp and the 2 URL parameter to tellafriend.asp...

CVE-2009-0429

Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the 1 search parameter to search.asp, 2 SortDir parameter to auctionsended.asp, and the 3 catid parameter to wishlist.php...

CVE-2009-0429

CVE-2009-0429 covers multiple SQL injection vulnerabilities in Active Bids by ActiveWebSoftwares. The issues permit remote execution of arbitrary SQL through user-supplied input in three vectors: (1) the search parameter to search.asp, (2) the SortDir parameter to auctionsended.asp, and (3) the c...

CVE-2009-0430

Active Bids is affected by CVE-2009-0430 through multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via the (1) search parameter to search.asp and (2) the URL parameter to tellafriend.asp. NVD lists a CVSS v2 base score of 4.3 (M...

CVE-2009-0430

Multiple cross-site scripting XSS vulnerabilities in Active Bids allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter to search.asp and the 2 URL parameter to tellafriend.asp...

CVE-2009-0429

Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the 1 search parameter to search.asp, 2 SortDir parameter to auctionsended.asp, and the 3 catid parameter to wishlist.php...

Active Bids

--------------------------------------------------------- Portal Name: Active Bids Vendor : http://www.activewebsoftwares.com/P84ActiveBids.aspx?Tabopen=1 Author : PouyaServer , [email protected] Aria-Security.Net Vulnerability : SQL/XSS...

Active Bids XSS / SQL Injection

--------------------------------------------------------- Portal Name: Active Bids Vendor : http://www.activewebsoftwares.com/P84ActiveBids.aspx?Tabopen=1 Author : PouyaServer , [email protected] Aria-Security.Net Vulnerability : SQL/XSS...

Active Bids - 'search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/33306/info Active Auction House and Active Auction Pro are prone to SQL-injection and cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

CVE-2008-5640

SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

Sql injection

SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2008-5640

CVE-2008-5640 describes an SQL injection in bidhistory.asp of Active Bids 3.5, exploitable via the ItemID parameter and enabling remote SQL command execution. Affected product: Active Bids 3.5 (bidhistory.asp). Root cause: unsanitized ItemID parameter leading to SQL injection. Impact: partial con...

CVE-2008-5640

SQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

activebids-sql.txt

Tybe : Remote Blind SQL Injection Vulnerability Vendor : www.activewebsoftwares.com Software : Active Bids author : Mountassif Moad http://site.il/activebids/bidhistory.asp?ItemID=354%20and%201=1 http://site.il/activebids/bidhistory.asp?ItemID=354%20and%201=0 Demo :...

Active Bids 3.5 (ItemID) Blind SQL Injection Vulnerability

No description provided by source. Tybe : Remote Blind SQL Injection Vulnerability Vendor : www.activewebsoftwares.com Software : Active Bids author : Mountassif Moad http://site.il/activebids/bidhistory.asp?ItemID=354%20and%201=1 http://site.il/activebids/bidhistory.asp?ItemID=354%20and%201=0 De...

Active Bids 3.5 (ItemID) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Active Bids 3.5 ItemID Blind SQL Injection Vulnerability ========================================================== Tybe : Remote Blind SQL Injection Vulnerability Vendor :...

Active Bids 3.5 - itemID Blind SQL Injection

Active Bids 3.5 - itemID Blind SQL Injection Tybe : Remote Blind SQL Injection Vulnerability Vendor : www.activewebsoftwares.com Software : Active Bids author : Mountassif Moad http://site.il/activebids/bidhistory.asp?ItemID=354%20and%201=1...

Active Bids 3.5 - 'itemID' Blind SQL Injection

Tybe : Remote Blind SQL Injection Vulnerability Vendor : www.activewebsoftwares.com Software : Active Bids author : Mountassif Moad http://site.il/activebids/bidhistory.asp?ItemID=354%20and%201=1 http://site.il/activebids/bidhistory.asp?ItemID=354%20and%201=0 Demo :...

Account theft vulnerability in MakeBid Auction Deluxe 3.30

Date : February 9, 2002 Product : MakeBid Auction Deluxe Version 3.30 Vendor : USANet Creations URL : http://www.netcreations.addr.com/auctiondeluxe.html Vulnerability : Cross site scripting vulnerability Insecure Cookie Usage Risk : High Summary : MakeBid Auction Deluxe is a commercial PERL CGI...