CVE-2013-7193 in C2C Forward Auction Creator
Summary
Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) pa parameter to auction/asp/list.asp, or the (2) UserID or (3) Password to auction/casp/admin.asp.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
12/20/2013
Disclosure
12/20/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 65848 | Etoshop C2C Forward Auction Creator sql injection | 89 | High | Unavailable | CVE-2013-7193 |