CVE-2009-4437 | BDVDB-2026-39796 Detail

Description#

Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to wishlist.asp and the (2) linkid parameter to links.asp. NOTE: vector 1 might overlap CVE-2005-1029.1.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstormsecurity.org/0912-exploits/activeauctionhouse-sql.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/54891
http://www.securityfocus.com/bid/37401
http://www.exploit-db.com/exploits/10520
http://secunia.com/advisories/14839

Exploit#

http://www.exploit-db.com/exploits/10520

History#

Version 12009-12-28Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.