Intrusion PreventionPHP.Labs.Top.Auction.SQL.Injection
Description
PHP Labs' Top Auction has a SQL-injection vulnerability. A remote attacker could execute arbitrary SQL commands in the back-end database via a specially-crafted HTTP request to the "viewcat.php" script, with injecting SQL statements in the "category" or "type" parameter.
Affected Products
PHP Labs Top Auction
PHP Labs Survey Wizard
Impact
SQL injection.
Recommended Actions
Currently we are not aware of any official supplied fix for this issue.
http://www.phplabs.com/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 14403 |
| Created | Mar 28, 2007 |
| Updated | Jan 13, 2022 |
| Risk |
|
| CVE ID | CVE-2005-3952 |
| Exploit Prediction Score | 1.51% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |