Sql injection

whatsns 4.0 allows index.php?question/ajaxadd.html title SQL injection...

CVE-2019-11450

CVE-2019-11450 affects Whatsns 4.0, where SQL injection is possible via the title parameter in index.php?question/ajaxadd.html. The issue is documented with CVSS v3.0 base score 9.8 (CRITICAL) and CVSS v2.0 base score 7.5 (HIGH). Affected component: the title field in the ajaxadd endpoint; root c...

PT-2019-12315

Name of the Vulnerable Software and Affected Versions whatsns version 4.0 Description The issue allows for SQL injection through the title parameter in the index.php?question/ajaxadd.html endpoint. Recommendations For version 4.0, avoid using the title parameter in the...

CVE-2019-11450: Improper Neutralization of Special Elements used in an SQL Command

whatsns 4.0 allows index.php?question/ajaxadd.html title SQL injection...