CVE-2005-1364

critical

Description

Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parameter to item.asp.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/20286

http://www.osvdb.org/15869

http://www.osvdb.org/15868

http://secunia.com/advisories/15136

http://marc.info/?l=bugtraq&m=111454192928364&w=2

Details

Source: Mitre, NVD

Published: 2005-05-02

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.01042

Detections

Analytics