Sql injection

SQL injection vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0286

Stoneware webNetwork prior to 6.0.8.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that can allow remote attackers to hijack user authentication and perform requests that modify user accounts. The issue is documented in CVE-2012-0286 and reflected across multiple feeds (NVD/Re...