SQL Injection Flaw in AJ Auction Pro Platinum by AJ Auction
CVE-2008-6003

Currently unrated

Key Information:

Vendor

Aj Square

Status
Aj Auction
Vendor
CVE Published:
28 January 2009

Badges

👾 Exploit Exists

What is CVE-2008-6003?

The SQL injection vulnerability in AJ Auction Pro Platinum 2, specifically in the sellers_othersitem.php file, enables remote attackers to execute arbitrary SQL commands by manipulating the seller_id parameter. This could lead to unauthorized data access and manipulation, allowing attackers to exploit the application's database.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/45430
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/6561
exploitx_refsource_EXPLOIT-DB

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.