CVE-2005-1029 in Active Auction House

요약 (영어)

Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp.

예약하다

2005. 04. 10.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
82384	Active Auction House sendpassword.asp SQL 주입	89	개념 증명	우회 방법	CVE-2005-1029
82383	Active Auction House ItemInfo.asp SQL 주입	89	개념 증명	정의되지 않음	CVE-2005-1029
24145	Active Web Softwares Active Auction House default.asp SQL 주입	89	개념 증명	정의되지 않음	CVE-2005-1029