CVE-2018-1000867

WeBid version up to current version 1.2.2 contains a SQL Injection vulnerability in All five yourauctions*.php scripts that can result in Database Read via…

published December 20, 2018

CVSS
—
EPSS
1%
Percentile
73.4
In the wild
Unconfirmed
What it is

WeBid version up to current version 1.2.2 contains a SQL Injection vulnerability in All five yourauctions*.php scripts that can result in Database Read via Blind SQL Injection. This attack appear to be exploitable via HTTP Request. This vulnerability appears to have been fixed in after commit 256a5f9d3eafbc477dcf77c7682446cc4b449c7f.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01461 · 73.4th percentile
Published
2018-12-20T17:00Z
EPSS history
Timeline
  • 20 DEC 17:00Z
    WeBid version up to current version 1.2.2 contains a SQL Injection vulnerability in All five yourauctions*.php scripts that can result in Database Read via…
    cvelistv5