CVE-2010-0723

SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.

• CWE-89

• http://4004securityproject.wordpress.com/2010/02/21/ero-auktion-2010-sql-injection-news-php/Exploit
• http://4004securityproject.wordpress.com/2010/02/21/ero-auktion-v-2-0-sql-injection-news-php/Exploit
• http://packetstormsecurity.org/1002-exploits/eroauktion20-sql.txtExploit
• http://packetstormsecurity.org/1002-exploits/eroauktion2010-sql.txtExploit
• http://secunia.com/advisories/38666Vendor Advisory
• http://www.exploit-db.com/exploits/11521Exploit
• http://www.exploit-db.com/exploits/11522Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56446
• http://4004securityproject.wordpress.com/2010/02/21/ero-auktion-2010-sql-injection-news-php/Exploit
• http://4004securityproject.wordpress.com/2010/02/21/ero-auktion-v-2-0-sql-injection-news-php/Exploit
• http://packetstormsecurity.org/1002-exploits/eroauktion20-sql.txtExploit
• http://packetstormsecurity.org/1002-exploits/eroauktion2010-sql.txtExploit
• http://secunia.com/advisories/38666Vendor Advisory
• http://www.exploit-db.com/exploits/11521Exploit
• http://www.exploit-db.com/exploits/11522Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56446

Published

Feb 26, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0717The default configuration of cfg.packagepages_actions_exclud…
• CVE-2010-0718Buffer overflow in Microsoft Windows Media Player 9 and 11.0…
• CVE-2010-0719An unspecified API in Microsoft Windows 2000, Windows XP, Wi…
• CVE-2010-0720SQL injection vulnerability in news.php in Erotik Auktionsha…
• CVE-2010-0721SQL injection vulnerability in news.php in Auktionshaus Gelb…
• CVE-2010-0722SQL injection vulnerability in news.php in Php Auktion Pro a…
• CVE-2010-0724SQL injection vulnerability in showimg.php in Arab Cart 1.0.…
• CVE-2010-0725Cross-site scripting (XSS) vulnerability in showimg.php in A…
• CVE-2010-0726Cross-site scripting (XSS) vulnerability in the tb-send.rb (…
• CVE-2010-0727The gfs2_lock function in the Linux kernel before 2.6.34-rc1…
• CVE-2010-0728smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support …
• CVE-2010-0729A certain Red Hat patch for the Linux kernel in Red Hat Ente…