CVE-2009-0106

CVE-2009-0106 is a SQL injection vulnerability in profile.php of PHPAuctions (PHPAuctionSystem). The flaw allows remote attackers to run arbitrary SQL commands through the user_id parameter, enabling potential data leakage or modification. The connected records also cite a related vulnerability (...

CVE-2009-0106

SQL injection vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2009-0108

PHPAuctions aka PHPAuctionSystem allows remote attackers to bypass authentication and gain administrative access via modified 1 PHPAUCTIONRMID, 2 PHPAUCTIONRMNAME, 3 PHPAUCTIONRMUSERNAME, and 4 PHPAUCTIONRMEMAIL cookies...

CVE-2009-0107

Cross-site scripting XSS vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

SFS EZ Auction - Blind SQL Injection

Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : SFS EZ Auction Remote Blind sql injection Home Script : http://www.scripts-for-sites.info/item.php?item=97 Greetz : Allah , All my freind P0c : http://localhost/viewfaqs.php?cat=1+and+1...

SFS EZ Auction - Blind SQL Injection

SFS EZ Auction - Blind SQL Injection Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : SFS EZ Auction Remote Blind sql injection Home Script : http://www.scripts-for-sites.info/item.php?item=97 Greetz : Allah , All my freind P0c :...