| Package | Affected versions | Patched versions |
|---|---|---|
| active auction house | = 7.1 |
Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) itemID parameter to ItemInfo.asp, or (5) Email field to sendpassword.asp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free