PT-2005-2093 · Radbids · Radbids Gold 2

Published 2005-04-12 · Updated 2017-07-11 · CVE-2005-1074

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RadBids Gold 2

Description A SQL injection issue exists in index.php, allowing remote attackers to execute arbitrary SQL commands via the mode parameter.

Recommendations For RadBids Gold 2, consider restricting access to the vulnerable index.php file until a patch is available, and avoid using the mode parameter in the affected API endpoint.

Exploit

Fix

Related Identifiers

CVE-2005-1074

Affected Products

Radbids Gold 2

References · 8

• 🔥 http://securityfocus.com/archive/1/395527 · Exploit
• 🔥 https://exploit-db.com/exploits/25370 · Exploit
• 🔥 http://osvdb.org/15429 · Exploit
• 🔥 http://securityfocus.com/bid/13080 · Exploit
• http://secunia.com/advisories/14906 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1074 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20040 · Note
• http://digitalparadox.org/advisories/rga.txt · Note