CVE-2023-47397

WeBid =1.2.2 is vulnerable to code injection via admin/categoriestrans.php...

WeBid security breach

WeBid is an open source auction site building solution. A security vulnerability exists in renlok WeBid 1.2.2 and earlier versions, which stems from an easy code injection attack via admin/categoriestrans.php...

CVE-2023-47397

CVE-2023-47397 affects WeBid 1.2.2 and earlier, with a code injection vulnerability via admin/categoriestrans.php. The issue is confirmed across multiple feeds (e.g., PT-2023-30442) and is rated CVSS v3.1 9.8 (Critical) with impact to confidentiality, integrity, and availability. Remediation: upg...

CVE-2023-47397

WeBid =1.2.2 is vulnerable to code injection via admin/categoriestrans.php...

CVE-2022-41477

A security issue was discovered in WeBid =1.2.2. A Server-Side Request Forgery SSRF vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories...

CVE-2022-41477

A security issue was discovered in WeBid =1.2.2. A Server-Side Request Forgery SSRF vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories...

Server side request forgery (ssrf)

A security issue was discovered in WeBid =1.2.2. A Server-Side Request Forgery SSRF vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories...

CVE-2022-41477

A security issue was discovered in WeBid =1.2.2. A Server-Side Request Forgery SSRF vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories...

WeBid 代码问题漏洞

WeBid is an open source auction site building solution. A security vulnerability exists in WeBid 1.2.2 and earlier versions, which stems from a server-side request forgery SSRF vulnerability in the admin/theme.php file that allows remote attackers to inject a payload via theme parameters to read...

PT-2022-25883 · Webid · Webid

Name of the Vulnerable Software and Affected Versions: WeBid versions 1.2.2 and earlier Description: A Server-Side Request Forgery SSRF issue allows remote attackers to inject payloads via theme parameters in the admin/theme.php file to read files across directories. Recommendations: For WeBid...

CVE-2022-41477

WeBid

CVE-2022-41477

A security issue was discovered in WeBid =1.2.2. A Server-Side Request Forgery SSRF vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories...

CVE-2020-23359

WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...

CVE-2020-23359

WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...

Design/Logic Flaw

WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...

CVE-2020-23359

WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...

CVE-2020-23359

CVE-2020-23359 affects WeBid 1.2.2 (admin/newuser.php) where password rechecking during registration uses a loose comparison, allowing two non-identical passwords to bypass the identicalness check. The issue is caused by non-strict equality logic in the registration flow, enabling potential bypas...

WeBid security breach

WeBid is an open source auction site building solution. A security vulnerability exists in WeBid 1.2.2, which stems from the fact that two different passwords can bypass the check...

CVE-2019-11592

WeBid 1.2.2 has reflected XSS via the id parameter to admin/deletenews.php, admin/editbannersuser.php, admin/editfaqscategory.php, or admin/excludeuser.php, or the offset parameter to admin/edituser.php...

Cross site scripting

WeBid 1.2.2 has reflected XSS via the id parameter to admin/deletenews.php, admin/editbannersuser.php, admin/editfaqscategory.php, or admin/excludeuser.php, or the offset parameter to admin/edituser.php...