Gianluca Baldo's vulnerability disclosures center on phpauction, a web-based auction application where the durable signal involves input-handling weaknesses, particularly cross-site scripting vulnerabilities characteristic of web application platforms. The recurring exposure reflects the application-layer attack surface inherent to user-facing web software; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Gianluca Baldo over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-3984HIGH PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew 2.0.5, allows remote attackers to execu | Aug 5, 2006 | 7.5 | 29 | NO | YES |
CVE-2002-0995HIGH login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to th | Oct 4, 2002 | 7.5 | 29 | NO | YES |
CVE-2005-2252HIGH PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID. | Jul 13, 2005 | 7.5 | 19 | NO | NO |
CVE-2005-2253HIGH SQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter to adsearch.php. NOTE: there is evidence that viewnews.php may | Jul 13, 2005 | 7.5 | 19 | NO | NO |
CVE-2005-2255MEDIUM Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain sensitive path information via ".." sequenc | Jul 13, 2005 | 6.4 | 17 | NO | NO |
CVE-2005-2254MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in PhpAuction 2.5 allow remote attackers to inject arbitrary web script or HTML via the lan parameter to (1) index.php or (2) ad | Jul 13, 2005 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Gianluca Baldo.
Media articles that mention a CVE ID that affects a product developed by Gianluca Baldo — matched by CVE ID, not by vendor name.