Lucene search
+L

3 matches found

Mend
Mend
•added 2018/12/20 5:00 p.m.•19 views

CVE-2018-1000867

WeBid version up to current version 1.2.2 contains a SQL Injection vulnerability in All five yourauctions.php scripts that can result in Database Read via Blind SQL Injection. This attack appear to be exploitable via HTTP Request. This vulnerability appears to have been fixed in after commit...

8.8CVSS0.01461EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2018/12/20 12:00 a.m.•8 views

PT-2018-9589

Name of the Vulnerable Software and Affected Versions: WeBid versions up to 1.2.2 Description: The issue is related to a SQL Injection vulnerability in the All five yourauctions.php scripts, which can result in Database Read via Blind SQL Injection. This attack appears to be exploitable via HTTP...

8.8CVSS0.01461EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/20 12:00 a.m.•14 views

CVE-2018-1000867: Improper Neutralization of Special Elements used in an SQL Command

WeBid version up to current version 1.2.2 contains a SQL Injection vulnerability in All five yourauctions.php scripts that can result in Database Read via Blind SQL Injection. This attack appear to be exploitable via HTTP Request. This vulnerability appears to have been fixed in after commit...

8.8CVSS5.6AI score0.01461EPSS
SaveExploits1References2
Rows per page
Query Builder