Vulnerabilities

TI-2009-04745 CVE-2009-4989 · GHSA-r665-jpxw-qm8g

Cross-site scripting (XSS) vulnerability in index.php in AJ Auction Pro OOPD 3.0 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in AJ Auction Pro OOPD 3.0 allows remote attackers to inject arbitrary web script or HTML via the txtkeyword parameter in a search action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01484 Published 2010-08-25 No fix listed CWE-79

TI-2009-03048 CVE-2009-3203 · GHSA-4fq8-mjrf-79qc

SQL injection vulnerability in store.php in AJ Auction Pro OOPD 2.x allows remote…

LOW 35

SQL injection vulnerability in store.php in AJ Auction Pro OOPD 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00993 Published 2009-09-16 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in index.php in AJ Auction Pro OOPD 3.0 allows…

SQL injection vulnerability in store.php in AJ Auction Pro OOPD 2.x allows remote…