CVE-2009-4989

The CVE-2009-4989 entry concerns an XSS vulnerability in AJ Auction Pro OOPD 3.0, specifically in index.php where the txtkeyword parameter in a search action can be exploited to Inject arbitrary web-script/HTML. Affected component: index.php of AJ Auction Pro OOPD 3.0. Underlying cause: cross-sit...

CVE-2009-3203

CVE-2009-3203 affects AJ Auction Pro OOPD 2.x, where the vulnerability is in store.php and is caused by an SQL injection via the id parameter. The issue allows remote attackers to execute arbitrary SQL commands (network attack, low complexity, no authentication) with a base CVSS v2 score of 7.5 (...