CVE-2005-1364

CVE-2005-1364

EPSS 1.5%

Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parameter to item.asp.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://digitalparadox.org/advisories/metabid.txt http://marc.info/?l=bugtraq&m=111454192928364&w=2 http://secunia.com/advisories/15136 https://exchange.xforce.ibmcloud.com/vulnerabilities/20286 http://www.osvdb.org/15868 http://www.osvdb.org/15869 http://www.securityfocus.com/bid/13395