Description

A security issue was discovered in WeBid <=1.2.2. A Server-Side Request Forgery (SSRF) vulnerability in the admin/theme.php file allows remote attackers to inject payloads via theme parameters to read files across directories.

Remediation

References

CVE-2022-41477

Related Vulnerabilities

WordPress Plugin WP Online Store Local File Include and Multiple File Disclosure Vulnerabilities (1.3.1)

WordPress Plugin Daily Inspiration Generator Open Redirect (2.0)

ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23341)

WordPress Plugin Wordpress Poll SQL Injection (36)

Oracle Application Server CVE-2009-1011 Vulnerability (CVE-2009-1011)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Tags

Missing Update Known Vulnerabilities CWE-918 CVE-2022-41477