Phpauction - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2009-08-19.

Products

• Phpauction - 3 CVEs
• Phpauction Gpl - 1 CVEs

Newest CVEs of Phpauction

• CVE-2008-6999 - CVSS 5 (medium), 2009-08-19: phpAuction 3.2, and possibly 3.3.0 GPL Basic edition, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which…
• CVE-2008-7000 - CVSS 7.5 (high), 2009-08-19: PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the lan parameter.…
• CVE-2008-2900 - CVSS 7.5 (high), 2008-06-27: SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
• CVE-2008-1416 - CVSS 6.8 (medium), 2008-03-20: Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PHP code via a URL in the include_path…