Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
phpauction phpauction 3.2 vulnerabilities and exploits
(subscribe to this query)
445
VMScore
CVE-2008-6999
phpAuction 3.2, and possibly 3.3.0 GPL Basic edition, allows remote malicious users to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.
Phpauction Phpauction 3.2
Phpauction Phpauction 3.3.0
755
VMScore
CVE-2008-2900
SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote malicious users to execute arbitrary SQL commands via the id parameter.
Phpauction Phpauction 3.2
1 EDB exploit
755
VMScore
CVE-2008-7000
PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote malicious users to execute arbitrary PHP code via a URL in the lan parameter. NOTE: this might be related to CVE-2005-2255.1.
Phpauction Phpauction 3.2
1 EDB exploit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223
CVE-2024-0044
information disclosure
CVE-2024-35753
HTML injection
CVE-2024-21306
CVE-2024-35733
SQL injection
CVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started