CVE Tools
Track your stack

Aj-square

13 CVEs tracked since 2007. Since Mar 2007, none of them reached CISA KEV.

Aj-square CVEs per month

Mar 2007 to Mar 2009. Point at a month, or focus the strip and use the arrow keys.
Aj-square CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2007-0330
2007-04null or fewer
2007-05null or fewer
2007-06null or fewer
2007-07null or fewer
2007-08null or fewer
2007-09null or fewer
2007-10null or fewer
2007-11null or fewer
2007-12null or fewer
2008-01null or fewer
2008-02null or fewer
2008-03null or fewer
2008-04null or fewer
2008-05null or fewer
2008-0620
2008-07null or fewer
2008-08null or fewer
2008-0920
2008-10null or fewer
2008-1130
2008-12null or fewer
2009-0120
2009-02null or fewer
2009-0310

Products

The products that kept showing up in Aj-square's monthly top three, with their CVEs summed over those months.

  1. Aj Auction54 months
  2. Aj Hyip32 months
  3. Aj Article11 month
  4. Aj Classifieds11 month
  5. Ajauction11 month
  6. Ajdating11 month
  7. Zeuscart11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Aj-square.

  1. CVE-2008-6965AJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, and Web 2.0 send a redirect but do not exit when certain scripts are called directly, which allows remote attackers to bypass ...7.5
  2. CVE-2008-6966AJ Square AJ Auction Pro Platinum Skin #1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php.7.5
  3. CVE-2008-6414SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the item_id parameter.7.5
  4. CVE-2008-6004Cross-site scripting (XSS) vulnerability in search.php in AJ Auction Pro Platinum 2 allows remote attackers to inject arbitrary web script or HTML via the product parameter.4.3
  5. CVE-2008-6003SQL injection vulnerability in sellers_othersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the seller_id parameter.7.5
  6. CVE-2008-5213SQL injection vulnerability in featured_article.php in AJ Article 1.0 allows remote attackers to execute arbitrary SQL commands via the artid parameter in a search detail action.7.5
  7. CVE-2008-5216SQL injection vulnerability in category_list.php in AJ Square ZeusCart 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter.7.5
  8. CVE-2008-5212SQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the item_id parameter.7.5
  9. CVE-2008-4043Multiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to execute arbitrary SQL commands via the artid parameter to (1) acme/article/comment.php and (2) prime/artic...7.5
  10. CVE-2008-4044SQL injection vulnerability in article/readarticle.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary SQL commands via the artid parameter.7.5
  11. CVE-2008-2860SQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter.7.5
  12. CVE-2008-2532SQL injection vulnerability in forum/topic_detail.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary SQL commands via the id parameter.7.5
  13. CVE-2007-1297SQL injection vulnerability in view_profile.php in AJDating 1.0 allows remote attackers to execute arbitrary SQL commands via the user_id parameter.7.5
  14. CVE-2007-1296SQL injection vulnerability in postingdetails.php in AJ Classifieds 1.0 allows remote attackers to execute arbitrary SQL commands via the postingid parameter.7.5
  15. CVE-2007-1298SQL injection vulnerability in subcat.php in AJ Auction 1.0 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter.7.5

The record

Peak rank
#22 in Nov 2008
Busiest month shown
Mar 2007, 3 CVEs
Months with a KEV entry
0 since Mar 2007
Monthly snapshots
6 since 2007
Aj-square's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store