252 matches found
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection through the admin/tax.php endpoint. The root cause is a SQL query in admin/tax.php that permits unauthorized access to database information, leading to high impact on confidentiality, integrity, and availability (CVSS 3.1 base score 9.8). The connected P...
CVE-2024-35409
WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...
PT-2024-26483 · Webid · Webid
Name of the Vulnerable Software and Affected Versions: WeBid version 1.1.2 Description: The issue is related to SQL Injection via the admin/tax.php endpoint. This allows for potential unauthorized access to database information. Recommendations: For WeBid version 1.1.2, as a temporary workaround,...
WeBid 安全漏洞
WeBid is an open source auction website building solution. A security vulnerability exists in WeBid version 1.1.2, which originates from a SQL injection vulnerability in the file admin/tax.php...
CVE-2024-32166
Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...
CVE-2024-32166
Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...
PT-2024-24453 · Webid · Webid
Name of the Vulnerable Software and Affected Versions: Webid version 1.2.1 Description: The issue allows attackers to exploit an Insecure Direct Object Reference IDOR vulnerability, which is a type of Broken Access Control vulnerability. This enables horizontal privilege escalation, permitting...
WeBid 安全漏洞
WeBid is an open source auction website building solution. A security vulnerability exists in WeBid v1.2.1, which stems from the presence of an insecure direct object reference and access control corruption vulnerability...
CVE-2024-32166
Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...
CVE-2024-32166
Webid v1.2.1 suffers from an Insecure Direct Object Reference IDOR - Broken Access Control vulnerability, allowing attackers to buy now an auction that is suspended horizontal privilege escalation...
CVE-2024-32166
The CVE-2024-32166 issue affects Webid v1.2.1 and is an Insecure Direct Object Reference (IDOR) leading to Broken Access Control. This allows horizontal privilege escalation—attackers can prematurely complete a purchase on a suspended auction. Root cause and exact vulnerable component are describ...
WordPress Plugin Blue Triad EZAnalytics Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2024-18302 · Blue Triad · Ezanalytics
Name of the Vulnerable Software and Affected Versions: Blue Triad EZAnalytics plugin for WordPress versions up to, and including, 1.0 Description: The issue allows unauthenticated attackers to inject arbitrary web scripts in pages due to insufficient input sanitization and output escaping via the...
CVE-2023-47397
WeBid =1.2.2 is vulnerable to code injection via admin/categoriestrans.php...
CVE-2023-47397
WeBid =1.2.2 is vulnerable to code injection via admin/categoriestrans.php...
