🔍 What is Webid?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2024-35409

CRITICAL CVSS 9.8 May 22, 2024

CVE-2024-35409 is a critical SQL injection vulnerability in WeBid 1.1.2 that allows attackers to execute arbitrary SQL commands via the admin/tax.php endpoint. This affects all WeBid 1.1.2 installatio...

CVE-2023-47397

CRITICAL CVSS 9.8 Nov 8, 2023

CVE-2023-47397 is a critical code injection vulnerability in WeBid auction software that allows attackers to execute arbitrary code on affected systems. The vulnerability exists in the admin/categorie...

CVE-2020-23359

CRITICAL CVSS 9.8 Jan 27, 2021

This vulnerability in WeBid 1.2.2 allows attackers to bypass password confirmation during user registration due to improper loose comparison. This affects all WeBid installations using the vulnerable ...