CVE-2005-1364

CVE-2005-1364 describes multiple SQL injection vulnerabilities in MetaBid Auctions, specifically affecting the metalinks metabid_auctions product. Attackers can exploit these flaws by injecting arbitrary SQL commands into the username or password fields of logIn.asp, or the intAuctionID parameter of item.asp. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to full compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.