CVE-2018-1000867

WeBid version up to current version 1.2.2 contains a SQL Injection vulnerability in All five yourauctions*.php scripts that can result in Database Read via Blind SQL Injection. This attack appear to be exploitable via HTTP Request. This vulnerability appears to have been fixed in after commit 256a5f9d3eafbc477dcf77c7682446cc4b449c7f.

• CWE-89

• http://bugs.webidsupport.com/view.php?id=647Issue Tracking, Release Notes, Vendor Advisory
• https://github.com/renlok/WeBid/commit/256a5f9d3eafbc477dcf77c7682446cc4b449c7fPatch
• https://telekomsecurity.github.io/assets/advisories/20181108_WeBid_Multiple_Vulnerabilities.txtExploit, Third Party Advisory
• http://bugs.webidsupport.com/view.php?id=647Issue Tracking, Release Notes, Vendor Advisory
• https://github.com/renlok/WeBid/commit/256a5f9d3eafbc477dcf77c7682446cc4b449c7fPatch
• https://telekomsecurity.github.io/assets/advisories/20181108_WeBid_Multiple_Vulnerabilities.txtExploit, Third Party Advisory

Published

Dec 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000861A code execution vulnerability exists in the Stapler web fra…9.8
• CVE-2018-1000862An information exposure vulnerability exists in Jenkins 2.15…
• CVE-2018-1000863A data modification vulnerability exists in Jenkins 2.153 an…
• CVE-2018-1000864A denial of service vulnerability exists in Jenkins 2.153 an…
• CVE-2018-1000865A sandbox bypass vulnerability exists in Script Security Plu…
• CVE-2018-1000866A sandbox bypass vulnerability exists in Pipeline: Groovy Pl…
• CVE-2018-1000868WeBid version up to current version 1.2.2 contains a Cross S…
• CVE-2018-1000869phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /ap…
• CVE-2018-1000870PHPipam version 1.3.2 and earlier contains a CWE-79 vulnerab…
• CVE-2018-1000871HotelDruid HotelDruid 2.3.0 version 2.3.0 and earlier contai…
• CVE-2018-1000872OpenKMIP PyKMIP version All versions before 0.8.0 contains a…
• CVE-2018-1000873Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Im…6.5