CVEvulnerability
CVE-2005-3952
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) type parameters to viewcat.php, or (3) certain search parameters. NOTE: later a disclosure reported the affected version as 1.0.
Affected configurations
• php labs top auction 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://pridels0.blogspot.com/2005/11/top-auction-multiple-sql-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/17687 Vendor Advisory
- http://www.osvdb.org/21105 www.osvdb.org
- http://www.osvdb.org/21106 www.osvdb.org
- http://www.securityfocus.com/archive/1/466565/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/466569/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15547 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2552 Vendor Advisory
- https://www.exploit-db.com/exploits/3456 www.exploit-db.com
- http://pridels0.blogspot.com/2005/11/top-auction-multiple-sql-vuln.html pridels0.blogspot.com
- http://secunia.com/advisories/17687 Vendor Advisory
- http://www.osvdb.org/21105 www.osvdb.org
- http://www.osvdb.org/21106 www.osvdb.org
- http://www.securityfocus.com/archive/1/466565/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/466569/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15547 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2552 Vendor Advisory
- https://www.exploit-db.com/exploits/3456 www.exploit-db.com