CVE-2018-1000882

WeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in getthumb.php that can result in Arbitrary Image File Read

published December 20, 2018

CVSS
—
EPSS
2%
Percentile
83.7
In the wild
Unconfirmed
What it is

WeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in getthumb.php that can result in Arbitrary Image File Read. This attack appear to be exploitable via HTTP GET Request. This vulnerability appears to have been fixed in after commit 256a5f9d3eafbc477dcf77c7682446cc4b449c7f.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02377 · 83.7th percentile
Published
2018-12-20T17:00Z
EPSS history
Timeline
  • 20 DEC 17:00Z
    WeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in getthumb.php that can result in Arbitrary Image File Read
    cvelistv5