CVE-2010-0672

Affected software: WSN Guest 1.02. The entry CVE-2010-0672 describes an SQL injection in index.php where the orderlinks parameter allows remote attackers to execute arbitrary SQL commands. The vulnerability is caused by unsafely handling user-supplied input in a web application component, enablin...