Security Advisory

CVE-2005-2253

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-07-13 04:00:00
Last updated 2024-08-07 22:22:48
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

SQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter to adsearch.php. NOTE: there is evidence that viewnews.php may not be part of the PhpAuction product, so it is not included in this description.