CVE-2009-0107

PHPAuctions (PHPAuctionSystem) is affected by a Cross-site Scripting (XSS) vulnerability in profile.php where the user_id parameter can be exploited to inject arbitrary web script or HTML. Affected component: profile.php in PHPAuctions. Root cause: unsanitized user_id input enabling script/HTML i...

CVE-2009-0108

PHPAuctions aka PHPAuctionSystem allows remote attackers to bypass authentication and gain administrative access via modified 1 PHPAUCTIONRMID, 2 PHPAUCTIONRMNAME, 3 PHPAUCTIONRMUSERNAME, and 4 PHPAUCTIONRMEMAIL cookies...

CVE-2009-0106

SQL injection vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2009-0106

CVE-2009-0106 is a SQL injection vulnerability in profile.php of PHPAuctions (PHPAuctionSystem). The flaw allows remote attackers to run arbitrary SQL commands through the user_id parameter, enabling potential data leakage or modification. The connected records also cite a related vulnerability (...

CVE-2009-0107

Cross-site scripting XSS vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

CVE-2009-0108: Undefined Security Weakness

PHPAuctions aka PHPAuctionSystem allows remote attackers to bypass authentication and gain administrative access via modified 1 PHPAUCTIONRMID, 2 PHPAUCTIONRMNAME, 3 PHPAUCTIONRMUSERNAME, and 4 PHPAUCTIONRMEMAIL cookies...

CVE-2009-0106: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2009-0107: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

SFS EZ Auction - Blind SQL Injection

Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : SFS EZ Auction Remote Blind sql injection Home Script : http://www.scripts-for-sites.info/item.php?item=97 Greetz : Allah , All my freind P0c : http://localhost/viewfaqs.php?cat=1+and+1...

SFS EZ Auction - Blind SQL Injection

SFS EZ Auction - Blind SQL Injection Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : SFS EZ Auction Remote Blind sql injection Home Script : http://www.scripts-for-sites.info/item.php?item=97 Greetz : Allah , All my freind P0c :...