CVEvulnerability
CVE-2005-1029
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-04-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp.
Affected configurations
• active web softwares active auction house 7.1
References
- http://digitalparadox.org/advisories/aass.txt digitalparadox.org
- http://marc.info/?l=bugtraq&m=111280834000432&w=2 marc.info
- http://secunia.com/advisories/14839 Vendor Advisory
- http://www.osvdb.org/15281 www.osvdb.org
- http://www.osvdb.org/15282 www.osvdb.org
- http://www.osvdb.org/15283 www.osvdb.org
- http://www.securityfocus.com/bid/13032 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/13034 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/13035 Vendor Advisory
- http://www.securitytracker.com/alerts/2005/Apr/1013649.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19977 exchange.xforce.ibmcloud.com
- http://digitalparadox.org/advisories/aass.txt digitalparadox.org
- http://marc.info/?l=bugtraq&m=111280834000432&w=2 marc.info
- http://secunia.com/advisories/14839 Vendor Advisory
- http://www.osvdb.org/15281 www.osvdb.org
- http://www.osvdb.org/15282 www.osvdb.org
- http://www.osvdb.org/15283 www.osvdb.org
- http://www.securityfocus.com/bid/13032 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/13034 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/13035 Vendor Advisory
- http://www.securitytracker.com/alerts/2005/Apr/1013649.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19977 exchange.xforce.ibmcloud.com