VYPR

WeBid

by Simpleauction

CVEs (1)

  • CVE-2011-10011CriAug 13, 2025
    risk 0.74cvss epss 0.70

    WeBid 1.0.2 contains a remote code injection vulnerability in the converter.php script, where unsanitized input in the to parameter of a POST request is written directly into includes/currencies.php. This allows unauthenticated attackers to inject arbitrary PHP code, resulting…