7.5
CVE-2005-2253
- EPSS 1.21%
- Veröffentlicht 13.07.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:14:32
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter to adsearch.php. NOTE: there is evidence that viewnews.php may not be part of the PhpAuction product, so it is not included in this description.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gianluca Baldo ≫ Phpauction Version2.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.21% | 0.644 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/15967
http://securitytracker.com/id?1014423