CVE-2005-1029

Published: 06/04/2005 Updated: 11/07/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 760

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in Active Auction House allow remote malicious users to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
active web softwares active auction house 7.1

source: wwwsecurityfocuscom/bid/13032/info Active Auction House is reportedly affected by multiple SQL injection vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries Successful exploitation could result in a compromise of the application, disclosure ...

source: wwwsecurityfocuscom/bid/13034/info Active Auction House is reportedly affected by a SQL injection vulnerability This issue is due to a failure in the application to properly sanitize user-supplied input before using it in a SQL query Successful exploitation could result in a compromise of the application, disclosure or modifica ...

NVD-CWE-Other http://digitalparadox.org/advisories/aass.txt http://www.securityfocus.com/bid/13032 http://www.securityfocus.com/bid/13034 http://www.securityfocus.com/bid/13035 http://www.securitytracker.com/alerts/2005/Apr/1013649.html http://secunia.com/advisories/14839 http://www.osvdb.org/15281 http://www.osvdb.org/15282 http://www.osvdb.org/15283 http://marc.info/?l=bugtraq&m=111280834000432&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/19977 https://nvd.nist.gov https://www.exploit-db.com/exploits/25346/

CVE-2005-1029

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect