CVE-2008-7118

WeBid auction script 0.5.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain SQL query…

published August 28, 2009

CVSS
—
EPSS
2%
Percentile
84.2
In the wild
Unconfirmed
What it is

WeBid auction script 0.5.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain SQL query logs via a direct request for logs/cron.log.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02445 · 84.2th percentile
Published
2009-08-28T15:00Z
EPSS history
Timeline
  • 28 AUG 15:00Z
    WeBid auction script 0.5.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain SQL query…
    cvelistv5