CVE-2005-1364

CVE-2005-1364

EPSS 1.5%

Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parameter to item.asp.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://digitalparadox.org/advisories/metabid.txt http://marc.info/?l=bugtraq&m=111454192928364&w=2 http://secunia.com/advisories/15136 https://exchange.xforce.ibmcloud.com/vulnerabilities/20286 http://www.osvdb.org/15868 http://www.osvdb.org/15869 http://www.securityfocus.com/bid/13395