PT-2019-12316

Name of the Vulnerable Software and Affected Versions whatsns version 4.0 Description The issue allows for SQL injection through the qid variable in the /index.php?inform/add.html endpoint. Recommendations For version 4.0, avoid using the qid variable in the /index.php?inform/add.html endpoint...

CVE-2019-11451: Improper Neutralization of Special Elements used in an SQL Command

whatsns 4.0 allows index.php?inform/add.html qid SQL injection...