CVE-2009-3712

CVE-2009-3712 describes multiple SQL injection vulnerabilities in Ebay Clone 2009 that allow remote attackers to execute arbitrary SQL commands through user_id in feedback.php and item_id in view_full_size.php, classifide_ad.php, and crosspromoteitems.php. The underlying issue is improper handlin...

CVE-2009-2423

CVE-2009-2423 describes an SQL injection in the Ebay Clone 2009 project, specifically in category.php via the cate_id parameter in a list action, allowing remote attackers to execute arbitrary SQL commands. The vulnerability affects the web application as described in the CVE entry; underlying de...