CVE-2013-7193: Etoshop c2c Forward Auction Creator

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) pa parameter to auction/asp/list.asp, or the (2) UserID or (3) Password to auction/casp/admin.asp.

Affected products

• Etoshop c2c Forward Auction Creator: version 2.0 only

Published 2013-12-21. Last modified 2026-06-17.