Vulnerabilities

TI-2006-03055 CVE-2006-3155 · GHSA-58xw-73v9-qpg6

Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 1.0 and earlier…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) item parameter in (a) emailtofriend.pl or (b) violation.pl…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01167 Published 2006-06-22 No fix listed

TI-2006-03054 CVE-2006-3154 · GHSA-fxjc-hg47-q982

SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote…

LOW 36

SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01381 Published 2006-06-22 No fix listed

TI-2006-03053 CVE-2006-3153 · GHSA-8g96-648w-5qjc

Cross-site scripting (XSS) vulnerability in index.pl in Ultimate Estate 1.0 and earlier…

LOW 23

Cross-site scripting (XSS) vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01299 Published 2006-06-22 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 1.0 and earlier…

SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote…

Cross-site scripting (XSS) vulnerability in index.pl in Ultimate Estate 1.0 and earlier…