CVE-2005-2259: Usanet Creations Domain Name Auction

High severity, CVSS 10.0. EPSS: 4.2% chance of exploitation in the next 30 days.

The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping Mall Software, (2) Domain Name Auction Software, (3) Standard Classified Ads Software, and (4) MakeBid Reverse Auction allows remote attackers to execute arbitrary code via shell metacharacters in the DISPCLOSED parameter.

Affected products

• Usanet Creations Domain Name Auction: any version
• Usanet Creations Makebid Auction Deluxe: any version; version 3.30 only
• Usanet Creations Makebid Auction Standard: any version
• Usanet Creations Makebid Reverse Auction: any version
• Usanet Creations Standard Classified Ads: any version
• Usanet Creations Usanet Shopping Mall: any version

Published 2005-07-13. Last modified 2026-06-16.