252 matches found
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection through the admin/tax.php endpoint. The root cause is a SQL query in admin/tax.php that permits unauthorized access to database information, leading to high impact on confidentiality, integrity, and availability (CVSS 3.1 base score 9.8). The connected P...
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...
PT-2024-26483 · Webid · Webid
Name of the Vulnerable Software and Affected Versions: WeBid version 1.1.2 Description: The issue is related to SQL Injection via the admin/tax.php endpoint. This allows for potential unauthorized access to database information. Recommendations: For WeBid version 1.1.2, as a temporary workaround,...
WeBid 安全漏洞
WeBid is an open source auction website building solution. A security vulnerability exists in WeBid version 1.1.2, which originates from a SQL injection vulnerability in the file admin/tax.php...
CVE-2024-32166
Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...
CVE-2024-32166
Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...
PT-2024-24453 · Webid · Webid
Name of the Vulnerable Software and Affected Versions: Webid version 1.2.1 Description: The issue allows attackers to exploit an Insecure Direct Object Reference IDOR vulnerability, which is a type of Broken Access Control vulnerability. This enables horizontal privilege escalation, permitting...
CVE-2024-32166
Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...
WeBid 安全漏洞
WeBid is an open source auction website building solution. A security vulnerability exists in WeBid v1.2.1, which stems from the presence of an insecure direct object reference and access control corruption vulnerability...
CVE-2024-32166
The CVE-2024-32166 issue affects Webid v1.2.1 and is an Insecure Direct Object Reference (IDOR) leading to Broken Access Control. This allows horizontal privilege escalation—attackers can prematurely complete a purchase on a suspended auction. Root cause and exact vulnerable component are describ...
CVE-2024-32166
Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...
WordPress Plugin Blue Triad EZAnalytics Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2024-18302 · Blue Triad · Ezanalytics
Name of the Vulnerable Software and Affected Versions: Blue Triad EZAnalytics plugin for WordPress versions up to, and including, 1.0 Description: The issue allows unauthenticated attackers to inject arbitrary web scripts in pages due to insufficient input sanitization and output escaping via the...
CVE-2023-47397
WeBid =1.2.2 is vulnerable to code injection via admin/categoriestrans.php...
CVE-2023-47397
WeBid =1.2.2 is vulnerable to code injection via admin/categoriestrans.php...
