WeBid 1.0.6 SQL Injection

Exploit Title: WeBid 1.0.6 SQL Injection Vulnerability Google Dork: "Powered by WeBid" Date: 1/9/13 Exploit Author: Life Wasted Vendor Homepage: http://www.webidsupport.com/ Version: Tested on 1.0.6, but could affect other version Tested On: Linux, Windows Vulnerable Code: Line 53 of the...

WeBid 1.0.5 File Disclosure

File disclosure vulnerability in WeBid js parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WeBid Multiple Vulnerabilities

WeBid is prone to directory traversal and multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

weBid 1.0.5 - Directory Traversal

weBid 1.0.5 - Directory Traversal Author: loneferret of Offensive Security Product: WeBid Version: 1.0.4 & 1.0.5 and maybe older versions Vendor Site: http://www.webidsupport.com Software Download:...

WeBid <= 1.0.5 Cross Site Scripting Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WeBid Vendor Homepage: http://www.webidsupport.com Software Link: http://sourceforge.net/projects/simpleauction/files/simpleauction/WeBid%20v1.0.4/WeBid-1.0.4.zip/download Version: 1.0.5 Tested on: Ubuntu Linux INGRESS SECURITY...

WeBid 1.0.5 Directory Traversal

Author: loneferret of Offensive Security Product: WeBid Version: 1.0.4 & 1.0.5 and maybe older versions Vendor Site: http://www.webidsupport.com Software Download: http://sourceforge.net/projects/simpleauction/files/simpleauction/WeBid%20v1.0.5/WeBid-1.0.5.zip/download/download Other related...

WeBid <= 1.0.5 Directory Traversal Vulnerability

Exploit for php platform in category web applications Author: loneferret of Offensive Security Product: WeBid Version: 1.0.4 & 1.0.5 and maybe older versions Vendor Site: http://www.webidsupport.com Software Download:...

WeBid 1.0.5 - Cross-Site Scripting

Exploit Title: WeBid Vendor Homepage: http://www.webidsupport.com Software Link: http://sourceforge.net/projects/simpleauction/files/simpleauction/WeBid%20v1.0.4/WeBid-1.0.4.zip/download Version: 1.0.5 Tested on: Ubuntu Linux INGRESS SECURITY SECURITY ADVISORY INGRES-11172012-WeBid Cross Site...

weBid 1.0.5 - Directory Traversal

Author: loneferret of Offensive Security Product: WeBid Version: 1.0.4 & 1.0.5 and maybe older versions Vendor Site: http://www.webidsupport.com Software Download: http://sourceforge.net/projects/simpleauction/files/simpleauction/WeBid%20v1.0.5/WeBid-1.0.5.zip/download/download Other related...

WeBid 1.0.5 - Cross-Site Scripting

WeBid 1.0.5 - Cross-Site Scripting Exploit Title: WeBid Vendor Homepage: http://www.webidsupport.com Software Link: http://sourceforge.net/projects/simpleauction/files/simpleauction/WeBid%20v1.0.4/WeBid-1.0.4.zip/download Version: 1.0.5 Tested on: Ubuntu Linux INGRESS SECURITY SECURITY ADVISORY...

WeBid 1.0.4 SQLi

SQL Injection vulnerability in WeBid Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WeBid Remote File Include and SQLi Vulnerabilities

WeBid to a remote file-include issue and an SQL injection SQLi issue. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WeBid 'getthumb.php' Remote File Disclosure Vulnerability

WeBid is prone to a remote file-disclosure vulnerability because it fails to adequately validate user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

WeBid <= 1.0.4 Multiple Vulnerabilities

Exploit for php platform in category web applications :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-08-17 WeBid = 1.0.4 Multiple Vulnerabilities Script: "Open source...

webid 1.0.4 - Multiple Vulnerabilities

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-08-17 WeBid = 1.0.4 Multiple Vulnerabilities Script: "Open source php/mysql fully featured auction script" Vendor:...

WeBid 1.0.4 RFI / File Disclosure / SQL Injection

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-08-17 WeBid = 1.0.4 Multiple Vulnerabilities Script: "Open source php/mysql fully featured auction script" Vendor:...

webid 1.0.4 - Multiple Vulnerabilities

webid 1.0.4 - Multiple Vulnerabilities :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-08-17 WeBid = 1.0.4 Multiple Vulnerabilities Script: "Open source php/mysql fully...

WeBid 1.0.2 RCE

Remote command execution vulnerability in WeBid converter.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

WeBid - 'converter.php' Remote PHP Code Injection (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'WeBid converter.php Remote PHP Code...

WeBid converter.php Remote PHP Code Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'WeBid converter.php Remote PHP Code...