PT-2009-1479 · Aj · Aj Auction Pro Platinum

Injector5 · Published 2009-01-28 · Updated 2017-09-29 · CVE-2008-6004

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AJ Auction Pro Platinum version 2

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by manipulating the product parameter in the "search.php" file.

Recommendations For AJ Auction Pro Platinum version 2, update the search.php file to properly sanitize the product parameter to prevent XSS attacks.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-6004

Affected Products

Aj Auction Pro Platinum

References · 4

• 🔥 https://exploit-db.com/exploits/6561 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6004 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6004 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45431 · Note