high7.5Public exploit code
CVE-2008-6966
AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AJ Auction - Authentication Bypass2008-11-10 · webapps · php · Verified
Impact
AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aj Square | Aj Auction | Version 1.0 |