Webidsupport vulnerabilities

Products

• Webid 17

Newest

• webidsupport webid WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php. CVE-2024-35409 9.8 CriticalMay 22, 2024
• webidsupport webid Webid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control... CVE-2024-32166 8.8 HighApril 19, 2024
• webidsupport webid WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php. CVE-2023-47397 9.8 CriticalNovember 8, 2023
• webidsupport webid A security issue was discovered in WeBid <=1.2.2. A Server-Side Request Forgery (SSRF)... CVE-2022-41477 9.1 CriticalOctober 14, 2022
• webidsupport webid WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because... CVE-2020-23359 9.8 CriticalJanuary 27, 2021
• webidsupport webid WeBid 1.2.2 has reflected XSS via the id parameter to admin/deletenews.php, admin/editbannersuser... CVE-2019-11592 6.1 MediumApril 29, 2019
• webidsupport webid WeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in... CVE-2018-1000882 7.5 HighDecember 20, 2018
• webidsupport webid WeBid version up to current version 1.2.2 contains a Cross Site Scripting (XSS) vulnerability in... CVE-2018-1000868 6.1 MediumDecember 20, 2018
• webidsupport webid WeBid version up to current version 1.2.2 contains a SQL Injection vulnerability in All five... CVE-2018-1000867 8.8 HighDecember 20, 2018
• webidsupport webid WeBid 1.1.1 allows remote attackers to conduct an LDAP injection attack via the (1) js or (2) cat... CVE-2014-5114 7.5 HighJuly 29, 2014
• webidsupport webid Multiple cross-site scripting (XSS) vulnerabilities in WeBid 1.1.1 allow remote attackers to... CVE-2014-5101 Public exploit 4.3 MediumJuly 25, 2014
• webidsupport webid Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers... CVE-2010-4873 Public exploit 4.3 MediumOctober 7, 2011
• webidsupport webid WeBid 1.0.0 allows remote attackers to obtain sensitive information via a direct request to a ... CVE-2011-3815 5.0 MediumSeptember 24, 2011
• webidsupport webid SQL injection vulnerability in item.php in WeBid auction script 0.5.4 allows remote attackers to... CVE-2008-7119 Public exploit 7.5 HighAugust 28, 2009
• webidsupport webid WeBid auction script 0.5.4 stores sensitive information under the web root with insufficient... CVE-2008-7118 Public exploit 5.0 MediumAugust 28, 2009
• webidsupport webid eledicss.php in WeBid auction script 0.5.4 allows remote attackers to modify arbitrary cascading... CVE-2008-7117 Public exploit 5.0 MediumAugust 28, 2009
• webidsupport webid SQL injection vulnerability in the admin panel (admin/) in WeBid auction script 0.5.4 allows... CVE-2008-7116 Public exploit 7.5 HighAugust 28, 2009