Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WeBid Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2018-1000882 - Vulnerability Database
WeBid

WeBid Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2018-1000882

High
Reference: CVE-2018-1000882
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-1000882
Title: WeBid Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Overview:

WeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in getthumb.php that can result in Arbitrary Image File Read. This attack appear to be exploitable via HTTP GET Request. This vulnerability appears to have been fixed in after commit 256a5f9d3eafbc477dcf77c7682446cc4b449c7f.