CVE-2010-4873

概要

参考情報

• osvdb.org/69103 · Exploit
• packetstormsecurity.org/1011-exploits/webid085p1-xss.txt · Exploit
• secunia.com/advisories/42171 · Vendor Advisory
• securityreason.com/securityalert/8429
• johnleitch.net/Vulnerabilities/WeBid.0.8.5P1.Reflected.Cross-site.Scripting/62 · Exploit
• securityfocus.com/bid/44765 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/63152

webid のその他の脆弱性

• CVE-2024-35409緊急 9.8WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php.
• CVE-2024-32166高 8.8Webid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control vulnerability, allowing attackers to buy now an…
• CVE-2023-47397緊急 9.8WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php.
• CVE-2022-41477緊急 9.1A security issue was discovered in WeBid <=1.2.2. A Server-Side Request Forgery (SSRF) vulnerability in the admin/theme.php file allows remo…
• CVE-2020-23359緊急 9.8WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the iden…