[VIM] Top Auction Pro (category) Remote SQL Injection Vulnerability

str0ke str0ke at milw0rm.com
Mon Jun 23 01:06:23 UTC 2008


Yep its a dupe, removing from the frontend.

Thanks George.

/str0ke

George A. Theall wrote:
> Milw0rm 5891 seems nearly the same as milw0rm 3456 / BID 15547 / OSVDB
> 21105 / CVE-2005-3952. I'm not clear what's the distinction between
> "Top Auction" and "Top Auction Pro", though. PHP Labs only seems to
> list the first in its list of products, but the demo for that claims
> to be for the second.  Same product maybe? Same vulnerability?
>
>
> George


More information about the VIM mailing list