Phpauction

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Phpauction records in CISA KEV

No Phpauction vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpauction 3 records LOW Phpauction Gpl 1 record MEDIUM

Records

4 records

TI-2008-01363 CVE-2008-1416 · GHSA-fxw5-mp3x-jpj6

Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote…

MEDIUM 57

Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) converter.inc.php, (2) messages.inc.php, and (…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.37721 Published 2008-03-20 No fix listed CWE-94

TI-2008-06688 CVE-2008-7000 · GHSA-xr45-42h9-q5rf

PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote…

LOW 37

PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the lan parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02052 Published 2009-08-18 No fix listed CWE-94

TI-2008-02774 CVE-2008-2900 · GHSA-h65f-q687-6mjg

SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to…

LOW 35

SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-06-27 No fix listed CWE-89

TI-2008-06687 CVE-2008-6999 · GHSA-qg9f-g8wx-9j9h

phpAuction 3.2, and possibly 3.3.0 GPL Basic edition, allows remote attackers to obtain…

LOW 26

phpAuction 3.2, and possibly 3.3.0 GPL Basic edition, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01324 Published 2009-08-18 No fix listed CWE-200

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0