Skip to content
OpenAdvisories

Vendor

WeBid

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2011-10011 Public exploit

    WeBid 1.0.2 converter.php Remote PHP Code Injection

    WeBid 1.0.2 contains a remote code injection vulnerability in the converter.php script, where unsanitized input in the to parameter of a POST request is written directly into includes/currencies.php. This allows unauthenticated attackers to inject arbitrary P…