Vulnerabilities

TI-2008-06688 CVE-2008-7000 · GHSA-xr45-42h9-q5rf

PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote…

LOW 37

PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the lan parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02052 Published 2009-08-18 No fix listed CWE-94

TI-2008-06687 CVE-2008-6999 · GHSA-qg9f-g8wx-9j9h

phpAuction 3.2, and possibly 3.3.0 GPL Basic edition, allows remote attackers to obtain…

LOW 26

phpAuction 3.2, and possibly 3.3.0 GPL Basic edition, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01324 Published 2009-08-18 No fix listed CWE-200

TI-2008-02774 CVE-2008-2900 · GHSA-h65f-q687-6mjg

SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to…

LOW 35

SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-06-27 No fix listed CWE-89

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote…

phpAuction 3.2, and possibly 3.3.0 GPL Basic edition, allows remote attackers to obtain…

SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to…