VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 13, 2005· Updated Jun 16, 2026

CVE-2005-2253

CVE-2005-2253

Description

SQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter to adsearch.php. NOTE: there is evidence that viewnews.php may not be part of the PhpAuction product, so it is not included in this description.

Affected products

2
  • Phpauction/Phpauction2 versions
    cpe:2.3:a:gianluca_baldo:phpauction:2.5:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gianluca_baldo:phpauction:2.5:*:*:*:*:*:*:*
    • (no CPE)range: =2.5

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.