CVE-2005-1364

Published: May 2, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password fields in logIn.asp, or (3) intAuctionID parameter to item.asp.

Affected (1)

Products: Metalinks: Metabid Auctions

Metalinks

1 product

Metabid Auctions

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Metalinks Metabid Auctions	All versions

References (14)

http://digitalparadox.org/advisories/metabid.txt

Source: cve@mitre.org

Exploit

http://marc.info/?l=bugtraq&m=111454192928364&w=2

Source: cve@mitre.org

http://secunia.com/advisories/15136

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/15868

Source: cve@mitre.org

http://www.osvdb.org/15869

Source: cve@mitre.org

http://www.securityfocus.com/bid/13395

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/20286

Source: cve@mitre.org

http://digitalparadox.org/advisories/metabid.txt