289 matches found
PT-2018-9589
Name of the Vulnerable Software and Affected Versions: WeBid versions up to 1.2.2 Description: The issue is related to a SQL Injection vulnerability in the All five yourauctions.php scripts, which can result in Database Read via Blind SQL Injection. This attack appears to be exploitable via HTTP...
PT-2018-9590
Name of the Vulnerable Software and Affected Versions: WeBid versions up to 1.2.2 Description: The issue allows for Javascript execution in the user's browser and injection of malicious markup into the page due to a Cross Site Scripting XSS vulnerability in files such as user login.php and...
PT-2018-9598
Name of the Vulnerable Software and Affected Versions: WeBid versions up to 1.2.2 Description: The issue concerns a Directory Traversal vulnerability in the getthumb.php file, which can lead to Arbitrary Image File Read. This can be exploited via an HTTP GET Request. Recommendations: For WeBid...
CVE-2018-1000882: Improper Limitation of a Pathname to a Restricted Directory
WeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in getthumb.php that can result in Arbitrary Image File Read. This attack appear to be exploitable via HTTP GET Request. This vulnerability appears to have been fixed in after commit...
CVE-2011-10011
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webidconverter.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:49:02+00:00| seen|...
WeBid 1.1.2P2 SQL Injection
Advisory ID: HTB23292 Product: WeBid Vendor: WeBid Vulnerable Versions: 1.1.2P2 and probably prior Tested Version: 1.1.2P2 Advisory Publication: January 22, 2016 without technical details Vendor Notification: January 22, 2016 Vendor Patch: February 4, 2016 Public Disclosure: February 17, 2016...
WeBid SQL Injection Vulnerability
WebID is the serial number of ESET antivirus software that can be obtained automatically. An SQL injection vulnerability exists in WeBid. Because the '$SESSION"id"' talkback variable is not properly filtered, an attacker can exploit the vulnerability to alter raw SQL queries and execute arbitrary...
SQL Injection in WeBid
High-Tech Bridge Security Research Lab discovered SQL Injection vulnerability in a poplar web auction software WeBid. The vulnerability can be exploited by remote non-authenticated attacker to alter present SQL query and execute arbitrary SQL commands in application's database. Successful...
SQL Injection Vulnerability in the Webid Parameter of the Hot.aspx Page of the Online Query System of Shanghai Caixa Science and Technology Development Corporation's Kefa...
Shanghai Cai Da Science and Technology Development Corporation Kofa online query system is a comprehensive query system for financial information. The product has a SQL injection vulnerability, the vulnerability URL is: /hot.aspx?mid1=&mid2=&webid=, the vulnerability parameter is webid, the...
WeBid 'ajax.php' Arbitrary File Upload Vulnerability
WeBid is an open source auction site building solutions. An arbitrary file upload vulnerability exists in WeBid that stems from the program failing to adequately filter user-submitted input. An attacker can exploit this vulnerability to upload arbitrary files to an affected computer and execute...
WeBid 1.1.1 /ajax.php 文件上传漏洞
No description provided by source...
WeBid 1.1.1 File Upload
File upload vulnerability in WeBid ajax.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
WeBid 1.1.1 Unrestricted File Upload Exploit
?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / / / XXXXXX / / XXXXXX / / XXXXXX / ------' Exploit Title : WeBid 1.1.1 Unrestricted File Upload Exploit Date ...
WeBid 1.1.1 - Unrestricted Arbitrary File Upload
WeBid 1.1.1 - Unrestricted Arbitrary File Upload ?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title ...
WeBid 1.1.1 Unrestricted File Upload Exploit
Exploit for php platform in category web applications ?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit...
WeBid 1.1.1 - Unrestricted Arbitrary File Upload
?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title : WeBid 1.1.1 Unrestricted File Upload Exploit...
WeBid 1.1.1 Unrestricted File Upload
?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title : WeBid 1.1.1 Unrestricted File Upload Exploit...
CVE-2014-5114
WeBid 1.1.1 allows remote attackers to conduct an LDAP injection attack via the 1 js or 2 cat parameter...
