Unrated severityNVD Advisory· Published Aug 13, 2009· Updated Jun 16, 2026

CVE-2008-6966

Description

AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

AJ Square/Ajauction
cpe:2.3:a:aj_square:aj_auction:1.0:*:pro_platinum_skin:*:*:*:*:*
AJ Square/AJ Auction Pro Platinum Skin #1llm-fuzzy

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/32243nvdExploit
exchange.xforce.ibmcloud.com/vulnerabilities/46528nvd
www.exploit-db.com/exploits/7087nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000