2 matches found
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...
9.8CVSS7.7AI score0.0051EPSS
SaveExploits1References1
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection through the admin/tax.php endpoint. The root cause is a SQL query in admin/tax.php that permits unauthorized access to database information, leading to high impact on confidentiality, integrity, and availability (CVSS 3.1 base score 9.8). The connected P...
9.8CVSS8.4AI score0.0051EPSS
SaveExploits1References1Affected Software1
20