CVE-2011-1060: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the member function in classes/member.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the wsnuser cookie to index.php...

PT-2011-2845

Name of the Vulnerable Software and Affected Versions WSN Guest version 1.24 Description A SQL injection issue exists in the member function in classes/member.php, allowing remote attackers to execute arbitrary SQL commands via the wsnuser cookie to "index.php". Recommendations For WSN Guest...