Skip to content

CVE-2009-0107 Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to inject arbitrary web script or HTML via the user_id parameter.

MediumCVSS 4.3 EPSS 1.5% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Cross-site scripting (XSS) vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to inject arbitrary web script or HTML via the user_id parameter.

Affected products

ProductAffected versionsFixed in
phpauctions = _nil_ No fix listed

References

  • 51145 exploit vdb-entry
  • 33331 third-party-advisory vendor-advisory
  • 33115 exploit vdb-entry
  • 7672 exploit