CVE Tools

phpauctions

Web & CMS Pluginsunknown

4

Cumulative CVEs

2

Monthly snapshots

#34

Peak rank

Top products

Latest CVEs

The 5 most recently published vulnerabilities affecting phpauctions.

CVE-2008-6663SQL injection vulnerability in profile.php in PHPAuctions.info PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arbitrary SQL commands via the auction_id parameter, a different...7.5Apr 8, 2009
CVE-2009-0106SQL injection vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arbitrary SQL commands via the user_id parameter.7.5Jan 9, 2009
CVE-2009-0108PHPAuctions (aka PHPAuctionSystem) allows remote attackers to bypass authentication and gain administrative access via modified (1) PHPAUCTION_RM_ID, (2) PHPAUCTION_RM_NAME, (3) PHPAUCTION_RM_USERN...7.5Jan 9, 2009
CVE-2009-0107Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to inject arbitrary web script or HTML via the user_id parameter.4.3Jan 9, 2009
CVE-2008-3487SQL injection vulnerability in profile.php in PHPAuction GPL Enhanced 2.51 allows remote attackers to execute arbitrary SQL commands via the id parameter.7.5Aug 6, 2008