CVE-2008-7118: Webidsupport Webid

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

WeBid auction script 0.5.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain SQL query logs via a direct request for logs/cron.log.

Affected products

• Webidsupport Webid: version 0.5.4 only

Published 2009-08-28. Last modified 2026-06-16.