289 matches found
CVE-2020-23359
WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...
CVE-2020-23359
WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...
Design/Logic Flaw
WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...
CVE-2020-23359
WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...
CVE-2020-23359
WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...
CVE-2020-23359
CVE-2020-23359 affects WeBid 1.2.2 (admin/newuser.php) where password rechecking during registration uses a loose comparison, allowing two non-identical passwords to bypass the identicalness check. The issue is caused by non-strict equality logic in the registration flow, enabling potential bypas...
CVE-2020-23359: Incorrect Comparison
WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...
PT-2021-10887
Name of the Vulnerable Software and Affected Versions WeBid version 1.2.2 Description The issue arises from a loose comparison used to check the identicalness of two passwords during registration in the admin/newuser.php file. This allows two non-identical passwords to bypass the check...
WeBid security breach
WeBid is an open source auction site building solution. A security vulnerability exists in WeBid 1.2.2, which stems from the fact that two different passwords can bypass the check...
Cross site scripting
WeBid 1.2.2 has reflected XSS via the id parameter to admin/deletenews.php, admin/editbannersuser.php, admin/editfaqscategory.php, or admin/excludeuser.php, or the offset parameter to admin/edituser.php...
CVE-2019-11592
WeBid 1.2.2 has reflected XSS via the id parameter to admin/deletenews.php, admin/editbannersuser.php, admin/editfaqscategory.php, or admin/excludeuser.php, or the offset parameter to admin/edituser.php...
CVE-2019-11592
WeBid 1.2.2 has reflected XSS via the id parameter to admin/deletenews.php, admin/editbannersuser.php, admin/editfaqscategory.php, or admin/excludeuser.php, or the offset parameter to admin/edituser.php...
CVE-2019-11592
CVE-2019-11592 affects WeBid 1.2.2 and is a reflected XSS vulnerability. The issue is triggered via user-supplied input in the id parameter of admin/deletenews.php, admin/editbannersuser.php, admin/editfaqscategory.php, or admin/excludeuser.php, and via the offset parameter in admin/edituser.php....
CVE-2019-11592
WeBid 1.2.2 has reflected XSS via the id parameter to admin/deletenews.php, admin/editbannersuser.php, admin/editfaqscategory.php, or admin/excludeuser.php, or the offset parameter to admin/edituser.php...
CVE-2019-11592: Improper Neutralization of Input During Web Page Generation
WeBid 1.2.2 has reflected XSS via the id parameter to admin/deletenews.php, admin/editbannersuser.php, admin/editfaqscategory.php, or admin/excludeuser.php, or the offset parameter to admin/edituser.php...
PT-2019-12402
Name of the Vulnerable Software and Affected Versions WeBid version 1.2.2 Description The issue is related to reflected XSS. It can be triggered via the id parameter to endpoints such as "admin/deletenews.php", "admin/editbannersuser.php", "admin/editfaqscategory.php", or "admin/excludeuser.php",...
WeBid 1.2.2 Cross Site Scripting
Multiple Reflected Cross-site Scripting Vulnerabilities in WeBid 1.2.2 Information -------------------- Advisory by Netsparker Name: Multiple Reflected Cross-site Scripting Vulnerabilities in WeBid 1.2.2 Affected Software: WeBid Affected Versions: 1.2.2 Homepage: http://www.webidsupport.com/...
WeBid SQL Injection Vulnerability (CNVD-2019-43415)
WeBid is an open source auction site building solutions. A SQL injection vulnerability exists in the yourauctions.php script in WeBid 1.2.2 and earlier versions. A remote attacker can exploit this vulnerability by sending an HTTP request to read the database...
WeBid Cross-Site Scripting Vulnerability
WeBid is an open source auction site building solutions. A cross-site scripting vulnerability exists in the userlogin.php and register.php files in WeBid 1.2.2 and earlier versions. An attacker can exploit this vulnerability to execute Javascript code in a user's browser with the help of a...
WeBid Path Traversal Vulnerability
WeBid is an open source auction site building solutions. A directory traversal vulnerability exists in the getthumb.php file in WeBid 1.2.2 and earlier versions. An attacker can exploit this vulnerability by sending an HTTP GET request to read an arbitrary image file...