What’s Vulnerable › Vulnerabilities

CVE-2005-2259

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-07-13 · updated 2026-06-16

Description

The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping Mall Software, (2) Domain Name Auction Software, (3) Standard Classified Ads Software, and (4) MakeBid Reverse Auction allows remote attackers to execute arbitrary code via shell metacharacters in the DISPCLOSED parameter.

Affected products

• Usanet Creations Domain Name Auction: all versions
• Usanet Creations Makebid Auction Deluxe: 3.30
• Usanet Creations Makebid Auction Standard: all versions
• Usanet Creations Makebid Reverse Auction: all versions
• Usanet Creations Standard Classified Ads: all versions
• Usanet Creations Usanet Shopping Mall: all versions

References

• http://secunia.com/advisories/15985
• http://securitytracker.com/id?1014411
• http://www.securityfocus.com/bid/14179
• http://secunia.com/advisories/15985
• http://securitytracker.com/id?1014411
• http://www.securityfocus.com/bid/14179

Get alerted when CVE-2005-2259 or the next vulnerability affects your stack