PT-2009-2585 · Webid · Webid Auction Script

CVE-2008-7116

Published

2009-08-28

Updated

2017-09-29

CVSS v2.0

7.5

High

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WeBid auction script version 0.5.4

Description The issue allows remote attackers to execute arbitrary SQL commands via the username in the admin panel.

Recommendations For WeBid auction script version 0.5.4, update to a newer version that contains a fix for this issue.

Exploit

Fix

RCE

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2008-7116

Webid Auction Script