NuytsTech Security

CVE-2005-3952

by ·

SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) type parameters to viewcat.php, or (3) certain search parameters. NOTE: later a disclosure reported the affected version as 1.0.

Date published : 2005-12-01

http://www.securityfocus.com/bid/15547

http://www.securityfocus.com/archive/1/466569/100/200/threaded

Tags: