CVE-2005-3952 in Top Auction

Summary

SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) type parameters to viewcat.php, or (3) certain search parameters. NOTE: later a disclosure reported the affected version as 1.0.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 12/01/2005
• Disclosure: 12/01/2005
• Moderation: VulDB entry created
• Entries: VDB-27231 (1)
• CPE: ready
• CWE: CWE-89 (Confirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.03489
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-3952
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-3952
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-3952/