CVE-2023-47397

WeBid =1.2.2 is vulnerable to code injection via admin/categoriestrans.php...

CVE-2023-47397

WeBid =1.2.2 is vulnerable to code injection via admin/categoriestrans.php...

Code injection

WeBid =1.2.2 is vulnerable to code injection via admin/categoriestrans.php...

CVE-2023-47397: Improper Control of Generation of Code

WeBid =1.2.2 is vulnerable to code injection via admin/categoriestrans.php...

WeBid security breach

WeBid is an open source auction site building solution. A security vulnerability exists in renlok WeBid 1.2.2 and earlier versions, which stems from an easy code injection attack via admin/categoriestrans.php...

CVE-2023-47397

WeBid =1.2.2 is vulnerable to code injection via admin/categoriestrans.php...

CVE-2023-47397

CVE-2023-47397 affects WeBid 1.2.2 and earlier, with a code injection vulnerability via admin/categoriestrans.php. The issue is confirmed across multiple feeds (e.g., PT-2023-30442) and is rated CVSS v3.1 9.8 (Critical) with impact to confidentiality, integrity, and availability. Remediation: upg...

CVE-2023-47397

WeBid =1.2.2 is vulnerable to code injection via admin/categoriestrans.php...

CVE-2022-41477

A security issue was discovered in WeBid =1.2.2. A Server-Side Request Forgery SSRF vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories...

CVE-2022-41477

A security issue was discovered in WeBid =1.2.2. A Server-Side Request Forgery SSRF vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories...

Server side request forgery (ssrf)

A security issue was discovered in WeBid =1.2.2. A Server-Side Request Forgery SSRF vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories...

CVE-2022-41477: Server-Side Request Forgery (SSRF)

A security issue was discovered in WeBid =1.2.2. A Server-Side Request Forgery SSRF vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories...

PT-2022-25883 · Webid · Webid

Name of the Vulnerable Software and Affected Versions: WeBid versions 1.2.2 and earlier Description: A Server-Side Request Forgery SSRF issue allows remote attackers to inject payloads via theme parameters in the admin/theme.php file to read files across directories. Recommendations: For WeBid...

WeBid 代码问题漏洞

WeBid is an open source auction site building solution. A security vulnerability exists in WeBid 1.2.2 and earlier versions, which stems from a server-side request forgery SSRF vulnerability in the admin/theme.php file that allows remote attackers to inject a payload via theme parameters to read...

CVE-2022-41477

A security issue was discovered in WeBid =1.2.2. A Server-Side Request Forgery SSRF vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories...

CVE-2022-41477

WeBid

CVE-2022-41477

A security issue was discovered in WeBid =1.2.2. A Server-Side Request Forgery SSRF vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories...

CVE-2020-23359

WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...

CVE-2020-23359

WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...

Design/Logic Flaw

WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...