PatchTheCVE: aj auctionhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2008-6966: AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, whichhttps://patchthecve.com/cve/CVE-2008-6966.htmlhttps://patchthecve.com/cve/CVE-2008-6966.htmlTue, 16 Jun 2026 23:03:19 +0000HIGH 7.5: AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php.CVE-2008-6965: AJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, and Web 2.0 send a redirect but do not https://patchthecve.com/cve/CVE-2008-6965.htmlhttps://patchthecve.com/cve/CVE-2008-6965.htmlTue, 16 Jun 2026 23:03:19 +0000HIGH 7.5: AJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, and Web 2.0 send a redirect but do not exit when certain scripts are called directly, which allows remote attackers to bypass authentication via a direct request to (1) site.php, (2) auction.php, (3) mail.php, (4) fee_setting.phpCVE-2008-6414: SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to executehttps://patchthecve.com/cve/CVE-2008-6414.htmlhttps://patchthecve.com/cve/CVE-2008-6414.htmlTue, 16 Jun 2026 23:02:11 +0000HIGH 7.5: SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.CVE-2008-6004: Cross-site scripting (XSS) vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers tohttps://patchthecve.com/cve/CVE-2008-6004.htmlhttps://patchthecve.com/cve/CVE-2008-6004.htmlTue, 16 Jun 2026 23:01:23 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to inject arbitrary web script or HTML via the product parameter.CVE-2008-6003: SQL injection vulnerability in sellers_othersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to https://patchthecve.com/cve/CVE-2008-6003.htmlhttps://patchthecve.com/cve/CVE-2008-6003.htmlTue, 16 Jun 2026 23:01:23 +0000HIGH 7.5: SQL injection vulnerability in sellers_othersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the seller_id parameter.CVE-2008-5212: SQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote attackers to exhttps://patchthecve.com/cve/CVE-2008-5212.htmlhttps://patchthecve.com/cve/CVE-2008-5212.htmlTue, 16 Jun 2026 22:59:28 +0000HIGH 7.5: SQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the item_id parameter.CVE-2008-2860: SQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote attackers to exechttps://patchthecve.com/cve/CVE-2008-2860.htmlhttps://patchthecve.com/cve/CVE-2008-2860.htmlTue, 16 Jun 2026 22:54:37 +0000HIGH 7.5: SQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter.