Show filters
10 Total Results
Displaying 1-10 of 10
Sort by:
Attacker Value
Unknown
CVE-2017-20138
Disclosure Date: July 16, 2022 (last updated February 24, 2025)
A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection (Blind). It is possible to initiate the attack remotely.
0
Attacker Value
Unknown
CVE-2019-9063
Disclosure Date: February 23, 2019 (last updated November 27, 2024)
PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount.
0
Attacker Value
Unknown
CVE-2017-17621
Disclosure Date: December 13, 2017 (last updated November 26, 2024)
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.
0
Attacker Value
Unknown
CVE-2010-2144
Disclosure Date: June 03, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in signinform.php in Zeeways eBay Clone Auction Script allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2010-1706
Disclosure Date: May 04, 2010 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitrary SQL commands via (1) the login field (aka the username parameter), and possibly (2) the password field, to index.php. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2009-4058
Disclosure Date: November 24, 2009 (last updated October 04, 2023)
SQL injection vulnerability in allauctions.php in Telebid Auction Script allows remote attackers to execute arbitrary SQL commands via the aid parameter.
0
Attacker Value
Unknown
CVE-2009-3195
Disclosure Date: September 15, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rss.php and (2) search.php.
0
Attacker Value
Unknown
CVE-2008-2278
Disclosure Date: May 16, 2008 (last updated October 04, 2023)
SQL injection vulnerability in browseproject.php in Freelance Auction Script 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a pdetails action.
0
Attacker Value
Unknown
CVE-2008-2279
Disclosure Date: May 16, 2008 (last updated October 04, 2023)
Freelance Auction Script 1.0 stores user passwords in plaintext in the tbl_users table, which allows attackers to gain privileges by reading the table.
0
Attacker Value
Unknown
CVE-2007-4121
Disclosure Date: August 01, 2007 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in admin.aspx in E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script allow remote attackers to execute arbitrary SQL commands via the (1) EmailAdd (Username) and (2) Pass (password) parameters. NOTE: some of these details are obtained from third party information.
0
