Description
SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Easy Laster · textwebappsphp
https://www.exploit-db.com/exploits/11547
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/56478
Exploit x_refsource_misc
http://4004securityproject.wordpress.com/2010/02/22/php-auktion-pro-sql-injection-news-php/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/38371
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
http://www.exploit-db.com/exploits/11547
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/38679
Scores
EPSS
0.0014
EPSS Percentile
34.5%
Details
CWE
CWE-89
Status
published
Products (1)
mhproducts/php_auktion_pro
Published
Feb 26, 2010
Tracked Since
Feb 18, 2026