← Database

CVE-2008-3487

HIGH CVSS: 7.5 Published: 2008-08-06 Modified: 2026-06-16

Description

SQL injection vulnerability in profile.php in PHPAuction GPL Enhanced 2.51 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Platforms

Phpauctions Phpauction Gpl Enhanced

Weakness Type

CWE-89

References