WeBid

WeBid is an open-source auction script written in the popular language PHP which a massive collection of inbuilt features. WeBid is the perfect choice for setting up any auction site. WeBid has an easy to use administration panel and a user-friendly installation process which allows you to have your own auction site set up in minutes.

Official Site:

http://www.webidsupport.com

Severity Summary:

Critical: 3 High: 5 Medium: 6

Reference

Title

Severity

WeBid Server-Side Request Forgery (SSRF) Vulnerability

Critical

WeBid Incorrect Comparison Vulnerability

Critical

WeBid Improper Control of Generation of Code (Code Injection) Vulnerability

Critical

CVE-2018-1000882

WeBid Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability

High

CVE-2018-1000867

WeBid Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

High

WeBid Other Vulnerability

High

WeBid Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

High

WeBid Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

High

WeBid Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2018-1000868

WeBid Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

WeBid Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

WeBid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

WeBid Permissions Privileges and Access Controls Vulnerability

Medium

WeBid Permissions Privileges and Access Controls Vulnerability

Medium