6 matches found
CVE-2018-1000882
WeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in getthumb.php that can result in Arbitrary Image File Read. This attack appear to be exploitable via HTTP GET Request. This vulnerability appears to have been fixed in after commit...
Directory traversal
WeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in getthumb.php that can result in Arbitrary Image File Read. This attack appear to be exploitable via HTTP GET Request. This vulnerability appears to have been fixed in after commit...
CVE-2018-1000882
WeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in getthumb.php that can result in Arbitrary Image File Read. This attack appear to be exploitable via HTTP GET Request. This vulnerability appears to have been fixed in after commit...
CVE-2018-1000882: Improper Limitation of a Pathname to a Restricted Directory
WeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in getthumb.php that can result in Arbitrary Image File Read. This attack appear to be exploitable via HTTP GET Request. This vulnerability appears to have been fixed in after commit...
PT-2018-9598
Name of the Vulnerable Software and Affected Versions: WeBid versions up to 1.2.2 Description: The issue concerns a Directory Traversal vulnerability in the getthumb.php file, which can lead to Arbitrary Image File Read. This can be exploited via an HTTP GET Request. Recommendations: For WeBid...
WeBid 'getthumb.php' Remote File Disclosure Vulnerability
WeBid is prone to a remote file-disclosure vulnerability because it fails to adequately validate user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...