Exploitation Summary
EIP tracks 2 public exploits for CVE-2005-1029. PoCs published by Dcrab.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in Active Auction House, where unsanitized user input in the 'itemID' parameter of 'ItemInfo.asp' can be exploited. No actual exploit code is present, only a description and example URL.
Description
Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp.
Exploits (2)
The provided text describes a SQL injection vulnerability in Active Auction House, where unsanitized user input in the 'itemID' parameter of 'ItemInfo.asp' can be exploited. No actual exploit code is present, only a description and example URL.
The provided text describes SQL injection vulnerabilities in Active Auction House software, detailing how unsanitized user input in the 'Sortby' and 'SortDir' parameters can be exploited. It includes example URLs demonstrating the injection points but lacks executable exploit code.