vendor:
WeBid
by:
Stack
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: WeBid
Affected Version From: 2000.5.4
Affected Version To: 2000.5.4
Patch Exists: YES
Related CWE: N/A
CPE: a:webid:webid:0.5.4
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
WeBid v0.5.4 sql injection vuln
A SQL injection vulnerability was discovered in WeBid v0.5.4. An attacker can send a specially crafted HTTP request to the vulnerable application in order to execute arbitrary SQL commands in the back-end database. This can potentially result in the manipulation or disclosure of arbitrary data.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL queries.
