Php Pro Bid
Vendor:
First CVE: Jul 31, 2006 · Active for 19 years
6
Total CVEs
More Total CVEs than 64% of tracked products
2.0
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 45% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Php Pro Bid over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 31, 2006
19 years ago
Most Recent CVE
Sep 24, 2009
6,149 days ago
CVE Severity & Scoring
Php Pro Bid6 CVEs
33%
67%
All CVEs352,708 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown6 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown6 (100.0%)
User Interaction
None0 (0.0%)
Unknown6 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown6 (100.0%)
Top CVEs
Signals from CVEs in this product scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2009-3336HIGH SQL injection vulnerability in auction_details.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL commands via the auction_id parameter. | Sep 24, 2009 | 7.5 | 28 | NO | YES |
CVE-2008-6043HIGH Multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 allow remote attackers to execute arbitrary SQL commands via the (1) order_field and (2) order_type parameters to c | Feb 3, 2009 | 7.5 | 28 | NO | YES |
CVE-2007-0758HIGH PHP remote file inclusion vulnerability in lang.php in PHPProbid 5.24 allows remote attackers to execute arbitrary PHP code via a URL in the SRC attribute of an HTML element in the | Feb 6, 2007 | 7.5 | 28 | NO | YES |
CVE-2006-3926HIGH Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) start parameters to (a) viewfeedback.php o | Jul 31, 2006 | 7.5 | 28 | NO | YES |
CVE-2006-3927MEDIUM Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbitrary web script or HTML via the advsrc parameter. | Jul 31, 2006 | 4.3 | 21 | NO | YES |
CVE-2009-0970MEDIUM PHP remote file inclusion vulnerability in includes/class_image.php in PHP Pro Bid 6.05, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via | Mar 19, 2009 | 6.8 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (6 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
5 CVEs
83.3% of CVEs· 93rd percentile
Social Chatter
Signals from CVEs in this product scope (6 CVEs).
Media Mentions
Signals from CVEs in this product scope (6 CVEs).
Top CNAs Publishing CVEs For Php Pro Bid
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 6.05 | 1 | 6.8 | 1.8% | 0 | 0 |
| 6.04 | 1 | 7.5 | 1.0% | 0 | 1 |
| 5.24 | 3 | 6.4 | 2.0% | 0 | 3 |