CVE-2009-0429

Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to search.asp, (2)…

published February 5, 2009

CVSS
—
EPSS
1%
Percentile
59.5
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to search.asp, (2) SortDir parameter to auctionsended.asp, and the (3) catid parameter to wishlist.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00907 · 59.5th percentile
Published
2009-02-05T00:00Z
EPSS history
Timeline
  • 05 FEB 00:00Z
    Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to search.asp, (2)…
    cvelistv5