SQL Injection Vulnerability in AJ Auction Pro Platinum Skin
CVE-2008-6414

Currently unrated

Key Information:

Vendor

Aj Square

Status
Aj Auction
Vendor
CVE Published:
6 March 2009

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2008-6414?

An SQL injection vulnerability exists in the detail.php file of AJ Auction Pro Platinum Skin 2. This security flaw allows remote attackers to pass arbitrary SQL commands via the item_id parameter, potentially compromising the integrity and confidentiality of the database. Exploiting this vulnerability could lead to unauthorized access to sensitive data or manipulation of the database, making it essential for users to apply necessary updates and security patches.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2008-6414 - Proof of Concept

References

http://www.securityfocus.com/bid/31362
vdb-entryx_refsource_BID
https://www.exploit-db.com/exploits/6550
exploitx_refsource_EXPLOIT-DB
https://exchange.xforce.ibmcloud.com/vulnerabilities/45399
vdb-entryx_refsource_XF

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.