SQL Injection in Wsn Links
CVE-2010-4006
Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) namecondition or (2) namesearch parameter.
Vulnerability class: SQL Injection
EPSS: 0.011 (63.5th percentile) — read the EPSS interpretation.
Affected products
- Wsn Links — versions 5.1.26, 5.1.34, 5.1.33
- Wsn Wsn_links — versions 5.1.10, 5.1.5, 5.1.6
- Wsnlinks Wsn_links — versions 5.0.65, 5.0.24, 5.0.73
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)