high7.5Public exploit code
CVE-2008-2860
SQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote attackers to execute arbitrary SQL commands via the cate_id parame…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AJ Auction Web 2.0 - 'cate_id' SQL Injection2008-06-19 · webapps · php · Verified
Impact
SQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aj Square | Aj Auction | Version web_2.0 |