CVE-2005-1364 Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parame...
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parameter to item.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| metalinks metabid auctions | All versions | No fix listed |
References
- digitalparadox.org exploit
- 20050426 Multiple SQL Injections in MetaBid Auctions mailing-list
- 15136 third-party-advisory vendor-advisory
- 15868 vdb-entry
- 15869 vdb-entry
- 13395 exploit vdb-entry
- metabid-item-login-sql-injection(20286) vdb-entry