• info
• discussion
• exploit
• solution
• references

WeBid Multiple Input Validation Vulnerabilities

WeBid is prone to multiple input-validation vulnerabilities:

- SQL-injection issues
- an information-disclosure issue
- a security-bypass issue

Exploiting these issues could allow an attacker to obtain sensitive information, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

WeBid 0.5.4 is vulnerable to the issues; other versions may also be affected.