Show filters
7 Total Results
Displaying 1-7 of 7
Sort by:
Attacker Value
Unknown

CVE-2009-3203

Disclosure Date: September 16, 2009 (last updated October 04, 2023)
SQL injection vulnerability in store.php in AJ Auction Pro OOPD 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
0
Attacker Value
Unknown

CVE-2008-6965

Disclosure Date: August 13, 2009 (last updated October 04, 2023)
AJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, and Web 2.0 send a redirect but do not exit when certain scripts are called directly, which allows remote attackers to bypass authentication via a direct request to (1) site.php, (2) auction.php, (3) mail.php, (4) fee_setting.php, (5) earnings.php, (6) insertion_fee_settings.php, (7) custom_category.php, (8) subcategory.php, (9) category.php, (10) report.php, (11) store_manager.php, and (12) choose_sell_format.php in admin/, and possibly other vectors.
0
0
Attacker Value
Unknown

CVE-2008-6414

Disclosure Date: March 06, 2009 (last updated October 04, 2023)
SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.
0
0
Attacker Value
Unknown

CVE-2008-6004

Disclosure Date: January 28, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to inject arbitrary web script or HTML via the product parameter.
0
0
Attacker Value
Unknown

CVE-2008-6003

Disclosure Date: January 28, 2009 (last updated October 04, 2023)
SQL injection vulnerability in sellers_othersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the seller_id parameter.
0
0
Attacker Value
Unknown

CVE-2008-5212

Disclosure Date: November 24, 2008 (last updated October 04, 2023)
SQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the item_id parameter.
0
0
Attacker Value
Unknown

CVE-2008-2860

Disclosure Date: June 25, 2008 (last updated October 04, 2023)
SQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter.
0
0