Improper input validation in Winny

CVE-2010-2361

Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.014 (70.6th percentile) — read the EPSS interpretation.

Affected products

  • Winny
  • N/a — versions n/a

Weakness classification (CWE)

References