273 matches found
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...
CVE-2024-35409
WeBid version 1.1.2 , an open-source auction website building solution, is vulnerable to SQL Injection via the admin/tax.php endpoint. This vulnerability (CWE-89) allows for potential unauthorized access to database information . No patch or newer version with a fix is currently specified; howeve...
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...
PT-2024-26483 · Webid · Webid
Name of the Vulnerable Software and Affected Versions: WeBid version 1.1.2 Description: The issue is related to SQL Injection via the admin/tax.php endpoint. This allows for potential unauthorized access to database information. Recommendations: For WeBid version 1.1.2, as a temporary workaround,...
WeBid 安全漏洞
WeBid is an open source auction website building solution. A security vulnerability exists in WeBid version 1.1.2, which originates from a SQL injection vulnerability in the file admin/tax.php...
CVE-2024-35409: Improper Neutralization of Special Elements used in an SQL Command
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...
CVE-2024-32166
Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...
CVE-2024-32166
Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...
PT-2024-24453 · Webid · Webid
Name of the Vulnerable Software and Affected Versions: Webid version 1.2.1 Description: The issue allows attackers to exploit an Insecure Direct Object Reference IDOR vulnerability, which is a type of Broken Access Control vulnerability. This enables horizontal privilege escalation, permitting...
CVE-2024-32166: Authorization Bypass Through User-Controlled Key
Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...
WeBid 安全漏洞
WeBid is an open source auction website building solution. A security vulnerability exists in WeBid v1.2.1, which stems from the presence of an insecure direct object reference and access control corruption vulnerability...
CVE-2024-32166
Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...
CVE-2024-32166
Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...
CVE-2024-32166
The open-source auction website building solution WeBid (specifically version 1.2.1 ) is vulnerable to an Insecure Direct Object Reference (IDOR) , which is a form of Broken Access Control . This flaw allows for horizontal privilege escalation , enabling an attacker to perform a "buy now" action ...
WordPress Plugin Blue Triad EZAnalytics Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2024-18302 · Blue Triad · Ezanalytics
Name of the Vulnerable Software and Affected Versions: Blue Triad EZAnalytics plugin for WordPress versions up to, and including, 1.0 Description: The issue allows unauthenticated attackers to inject arbitrary web scripts in pages due to insufficient input sanitization and output escaping via the...