CVE-2008-3487

  • Last update: Apr 13, 2023

Description

SQL injection vulnerability in profile.php in PHPAuction GPL Enhanced 2.51 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Software From Fixed in
phpauctions / phpauction_gpl_enhanced 2.51 2.51.x

Details

    • Severity: High
  • CVE: CVE-2008-3487
  • Published: Aug 6, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs

OWASP TOP 10