3 matches found
CVE-2018-1000867
WeBid version up to current version 1.2.2 contains a SQL Injection vulnerability in All five yourauctions.php scripts that can result in Database Read via Blind SQL Injection. This attack appear to be exploitable via HTTP Request. This vulnerability appears to have been fixed in after commit...
PT-2018-9589
Name of the Vulnerable Software and Affected Versions: WeBid versions up to 1.2.2 Description: The issue is related to a SQL Injection vulnerability in the All five yourauctions.php scripts, which can result in Database Read via Blind SQL Injection. This attack appears to be exploitable via HTTP...
CVE-2018-1000867: Improper Neutralization of Special Elements used in an SQL Command
WeBid version up to current version 1.2.2 contains a SQL Injection vulnerability in All five yourauctions.php scripts that can result in Database Read via Blind SQL Injection. This attack appear to be exploitable via HTTP Request. This vulnerability appears to have been fixed in after commit...