CVE-2005-1364 | BDVDB-2026-9662 Detail

Description#

Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parameter to item.asp.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.osvdb.org/15869
http://www.securityfocus.com/bid/13395
http://secunia.com/advisories/15136
http://www.osvdb.org/15868
https://exchange.xforce.ibmcloud.com/vulnerabilities/20286
http://marc.info/?l=bugtraq&m=111454192928364&w=2
http://digitalparadox.org/advisories/metabid.txt

Exploit#

No public exploit known

History#

Version 12005-04-28Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.