CVE-2019-11452

whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...

Sql injection

whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...

CVE-2019-11452

Whatsns 4.0 is affected by a SQL injection in the admin workflow: index.php?admin_category/remove.html cid[]. The Cy description in connected Red Hat EU and NVD entries confirms that the vulnerability stems from handling of the cid[] parameter, enabling SQL injection. The records do not provide s...

PT-2019-12317

Name of the Vulnerable Software and Affected Versions whatsns version 4.0 Description The issue allows for SQL injection through the cid parameter in the /index.php?admin category/remove.html endpoint. Recommendations For version 4.0, avoid using the cid parameter in the /index.php?admin...

CVE-2019-11452: Improper Neutralization of Special Elements used in an SQL Command

whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...