SQL Injection Vulnerabilities in Active Auction House by Active Auction House
CVE-2005-1029

Currently unrated

Key Information:

Vendor: Active Web Softwares
Status: Active Auction House
Vendor: CVE Published:; 6 April 2005

🔔 Create Active Web Softwares Vulnerability Alert

What is CVE-2005-1029?

Active Auction House is susceptible to multiple SQL injection vulnerabilities that enable remote attackers to execute arbitrary SQL commands. The vulnerabilities arise from improper handling of input parameters in various scripts, including catid, SortDir, Sortby, itemID, and Email fields. Exploiting these vulnerabilities may allow attackers to compromise the application's database, potentially leading to unauthorized access to sensitive information.

References

http://www.securityfocus.com/bid/13034

vdb-entryx_refsource_BID

https://exchange.xforce.ibmcloud.com/vulnerabilities/19977

vdb-entryx_refsource_XF

http://www.osvdb.org/15283

vdb-entryx_refsource_OSVDB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Apr 10, 2005
Vulnerability published
Apr 6, 2005

CVE-2005-1029 Data

JSON