VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 25, 2014· Updated Jun 17, 2026

CVE-2014-5101

CVE-2014-5101

Description

Multiple cross-site scripting (XSS) vulnerabilities in WeBid 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) TPL_name, (2) TPL_nick, (3) TPL_email, (4) TPL_year, (5) TPL_address, (6) TPL_city, (7) TPL_prov, (8) TPL_zip, (9) TPL_phone, (10) TPL_pp_email, (11) TPL_authnet_id, (12) TPL_authnet_pass, (13) TPL_worldpay_id, (14) TPL_toocheckout_id, or (15) TPL_moneybookers_email in a first action to register.php or the (16) username parameter in a login action to user_login.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Webidsupport/Webid2 versions
    cpe:2.3:a:webidsupport:webid:1.1.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:webidsupport:webid:1.1.1:*:*:*:*:*:*:*
    • (no CPE)range: =1.1.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.