Vulnerabilities

TI-2009-03178 CVE-2009-3336 · GHSA-vf29-8mcc-9rw6

SQL injection vulnerability in auction_details.php in PHP Pro Bid allows remote attackers…

LOW 35

SQL injection vulnerability in auction_details.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL commands via the auction_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2009-09-24 No fix listed CWE-89

TI-2009-00924 CVE-2009-0970 · GHSA-wp22-wqwx-2pc9

PHP remote file inclusion vulnerability in includes/class_image.php in PHP Pro Bid 6.05…

LOW 34

PHP remote file inclusion vulnerability in includes/class_image.php in PHP Pro Bid 6.05, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the fileExtension parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01795 Published 2009-03-19 No fix listed CWE-94

TI-2008-05739 CVE-2008-6043 · GHSA-xg9j-97mr-8v79

Multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 allow remote attackers…

LOW 35

Multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 allow remote attackers to execute arbitrary SQL commands via the (1) order_field and (2) order_type parameters to categories.php and unspecified other comp…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00971 Published 2009-02-03 No fix listed CWE-89

Vulnerabilities

Filters

SQL injection vulnerability in auction_details.php in PHP Pro Bid allows remote attackers…

PHP remote file inclusion vulnerability in includes/class_image.php in PHP Pro Bid 6.05…

Multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 allow remote attackers…