CVEvulnerability
CVE-2005-2062
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-06-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to execute arbitrary SQL commands via the catid parameter to (1) default.asp or (2) buyersend.asp, (3) Administrator ID field in admin.asp, E-mail field in (4) advertiserstart.asp or (5) buyer.asp, or Keyword field in search.asp.
Affected configurations
• active web softwares activebuyandsell 6.2
References
- http://echo.or.id/adv/adv21-theday-2005.txt echo.or.id
- http://marc.info/?l=bugtraq&m=111963341429906&w=2 marc.info
- http://www.securityfocus.com/bid/23110 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1096 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33183 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/3550 www.exploit-db.com
- http://echo.or.id/adv/adv21-theday-2005.txt echo.or.id
- http://marc.info/?l=bugtraq&m=111963341429906&w=2 marc.info
- http://www.securityfocus.com/bid/23110 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/1096 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33183 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/3550 www.exploit-db.com