Webmastersite: >> Wsn Guest Security Vulnerabilities
SQL injection vulnerability in the member function in classes/member.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the wsnuser cookie to index.php.
CVSS Score
7.5
EPSS Score
0.023
Published
2011-02-23
SQL injection vulnerability in memberlist.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the time parameter.
CVSS Score
7.5
EPSS Score
0.013
Published
2011-02-23
SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands via the orderlinks parameter.
CVSS Score
7.5
EPSS Score
0.01
Published
2010-02-22
SQL injection vulnerability in search.php in WSN Guest 1.23 allows remote attackers to execute arbitrary SQL commands via the search parameter in an advanced action.
CVSS Score
7.5
EPSS Score
0.01
Published
2009-02-23