CVE-2024-35409

WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...

CVE-2024-35409

WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...

CVE-2024-35409

WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...

CVE-2024-35409

WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...

CVE-2024-35409

WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...

CVE-2024-35409

WeBid version 1.1.2 , an open-source auction website building solution, is vulnerable to SQL Injection via the admin/tax.php endpoint. This vulnerability (CWE-89) allows for potential unauthorized access to database information . No patch or newer version with a fix is currently specified; howeve...

CVE-2024-35409

WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...

WeBid 安全漏洞

WeBid is an open source auction website building solution. A security vulnerability exists in WeBid version 1.1.2, which originates from a SQL injection vulnerability in the file admin/tax.php...

CVE-2024-35409: Improper Neutralization of Special Elements used in an SQL Command

WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...

PT-2024-26483 · Webid · Webid

Name of the Vulnerable Software and Affected Versions: WeBid version 1.1.2 Description: The issue is related to SQL Injection via the admin/tax.php endpoint. This allows for potential unauthorized access to database information. Recommendations: For WeBid version 1.1.2, as a temporary workaround,...

CVE-2024-32166

Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...

CVE-2024-32166

Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...

CVE-2024-32166

Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...

CVE-2024-32166

The open-source auction website building solution WeBid (specifically version 1.2.1 ) is vulnerable to an Insecure Direct Object Reference (IDOR) , which is a form of Broken Access Control . This flaw allows for horizontal privilege escalation , enabling an attacker to perform a "buy now" action ...

PT-2024-24453 · Webid · Webid

Name of the Vulnerable Software and Affected Versions: Webid version 1.2.1 Description: The issue allows attackers to exploit an Insecure Direct Object Reference IDOR vulnerability, which is a type of Broken Access Control vulnerability. This enables horizontal privilege escalation, permitting...

WeBid 安全漏洞

WeBid is an open source auction website building solution. A security vulnerability exists in WeBid v1.2.1, which stems from the presence of an insecure direct object reference and access control corruption vulnerability...

CVE-2024-32166: Authorization Bypass Through User-Controlled Key

Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...

CVE-2024-32166

Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...

WordPress Plugin Blue Triad EZAnalytics Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2024-18302 · Blue Triad · Ezanalytics

Name of the Vulnerable Software and Affected Versions: Blue Triad EZAnalytics plugin for WordPress versions up to, and including, 1.0 Description: The issue allows unauthenticated attackers to inject arbitrary web scripts in pages due to insufficient input sanitization and output escaping via the...