Vulnerabilities

TI-2007-01648 CVE-2007-1712 · GHSA-572h-h6vj-p4c7

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1…

LOW 35

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01101 Published 2007-03-27 No fix listed

TI-2005-00970 CVE-2005-1030 · GHSA-fph5-45gp-wr26

Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote…

LOW 28

Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, (4) ReturnURL paramet…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0509 Published 2005-04-09 No fix listed

TI-2005-00969 CVE-2005-1029 · GHSA-45qh-hw85-4h68

Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to…

MEDIUM 40

Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to Item…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04264 Published 2005-04-09 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1…

Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote…

Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to…