Approved changes feed: RSS · Atom
cpe:2.3:a:webidsupport:webid:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Webidsupport (3c170663-d547-5d1d-8bfd-c805600d3a98) |
|---|---|
| Product | Webid (6525c4f8-8e1f-5fe3-8b3a-3553a94763e9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/renlok/webid |
purl2cpe | 2026-06-01 10:13:10.610558 |
pkg:sourceforge/simpleauction |
purl2cpe | 2026-06-01 10:13:10.610561 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-47397 |
vulnerable | 2026-06-08 06:14:24.687318 |
Details available
WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php.
Published: 2023-11-08T00:00:00.000Z
Updated: 2024-09-03T20:06:56.239Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41477 |
vulnerable | 2026-06-08 05:48:30.417493 |
Details available
A security issue was discovered in WeBid <=1.2.2. A Server-Side Request Forgery (SSRF) vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories.
Published: 2022-10-14T00:00:00.000Z
Updated: 2025-05-14T15:17:55.566Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000882 |
vulnerable | 2026-06-08 05:10:26.182050 |
Details available
WeBid version up to current version 1.2.2 contains a Directory Traversal vulnerability in getthumb.php that can result in Arbitrary Image File Read. This attack appear to be exploitable via HTTP GET Request. This vulnerability appears to have been fixed in after commit 256a5f9d3eafbc477dcf77c7682446cc4b449c7f.
Published: 2018-12-20T17:00:00.000Z
Updated: 2024-09-17T00:56:34.208Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000868 |
vulnerable | 2026-06-08 05:10:26.143741 |
Details available
WeBid version up to current version 1.2.2 contains a Cross Site Scripting (XSS) vulnerability in user_login.php, register.php that can result in Javascript execution in the user's browser, injection of malicious markup into the page. This attack appear to be exploitable via The victim user must click a malicous link. This vulnerability appears to have been fixed in after commit 256a5f9d3eafbc477dcf77c7682446cc4b449c7f.
Published: 2018-12-20T17:00:00.000Z
Updated: 2024-09-16T22:08:51.962Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000867 |
vulnerable | 2026-06-08 05:10:26.143306 |
Details available
WeBid version up to current version 1.2.2 contains a SQL Injection vulnerability in All five yourauctions*.php scripts that can result in Database Read via Blind SQL Injection. This attack appear to be exploitable via HTTP Request. This vulnerability appears to have been fixed in after commit 256a5f9d3eafbc477dcf77c7682446cc4b449c7f.
Published: 2018-12-20T17:00:00.000Z
Updated: 2024-09-16T18:43:58.903Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-10011 |
vulnerable | 2026-06-08 04:56:40.581626 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.