VYPR

AJ Auction

by AJ Auction

CVEs (2)

  • CVE-2008-5212Nov 24, 2008
    risk 0.03cvss epss 0.00

    SQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the item_id parameter.

  • CVE-2007-1298Mar 7, 2007
    risk 0.03cvss epss 0.02

    SQL injection vulnerability in subcat.php in AJ Auction 1.0 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter.