Security Advisory

CVE-2013-7193

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2013-12-21 00:00:00
Last updated 2024-08-06 18:01:19
Assigner mitre
State PUBLISHED

Description

Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) pa parameter to auction/asp/list.asp, or the (2) UserID or (3) Password to auction/casp/admin.asp.