PatchTheCVEaj auction vulnerabilities and fixes
Recent CVEs affecting aj auction, with upgrade or downgrade steps. 6 tracked.
Also searched as: ajauction.
aj auction has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2009-08-13. Highest priority: CVE-2008-6965 (score 53/100).
- CVE-2008-6966 HIGH 7.5 DOWNGRADE AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, which
- CVE-2008-6965 HIGH 7.5 DOWNGRADE AJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, and Web 2.0 send a redirect but do not
- CVE-2008-6414 HIGH 7.5 DOWNGRADE SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute
- CVE-2008-6004 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to
- CVE-2008-6003 HIGH 7.5 DOWNGRADE SQL injection vulnerability in sellers_othersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to
- CVE-2008-5212 HIGH 7.5 UPGRADE SQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote attackers to ex
FAQ
How do I fix aj auction vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is aj auction being exploited right now?
None of the tracked aj auction CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which aj auction CVE should I patch first?
CVE-2008-6965 currently ranks highest (53/100): AJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, and Web 2.0 send a redirect but do not .