WSN Classifieds 6.2.12 / 6.2.18 Cross Site Scripting / SQL Injection

Exploit Title: WSN Classifieds v.6.2.12 & 6.2.18 Multiple Vulnerabilities Script Page : http://www.wsnclassifieds.com Date: 1-12-2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista IE9 - Firefox 8.0 Note: Redirect and Html Injection can ...

WSN Classifieds v.6.2.12 and 6.2.18 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WSN Classifieds v.6.2.12 & 6.2.18 Multiple Vulnerabilities Script Page : http://www.wsnclassifieds.com Date: 1-12-2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista IE...

WSN Classifieds 6.2.126.2.18 - Multiple Vulnerabilities

WSN Classifieds 6.2.126.2.18 - Multiple Vulnerabilities Exploit Title: WSN Classifieds v.6.2.12 & 6.2.18 Multiple Vulnerabilities Script Page : http://www.wsnclassifieds.com Date: 1-12-2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista...

WSN Classifieds 6.2.12/6.2.18 - Multiple Vulnerabilities

Exploit Title: WSN Classifieds v.6.2.12 & 6.2.18 Multiple Vulnerabilities Script Page : http://www.wsnclassifieds.com Date: 1-12-2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista IE9 - Firefox 8.0 Note: Redirect and Html Injection can ...

WSN Software Directory '.php' Files Information Disclosure Vulnerability

WSN Software Directory is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3820

WSN Software 6.0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/prestart.php and certain other files...

Information disclosure

WSN Software 6.0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/prestart.php and certain other files...

CVE-2011-3820

Affected software: WSN Software 6.0.6. Vulnerability: information disclosure via direct request to a .php file, exposing the installation path in an error message (e.g., includes/prestart.php). Root cause: misreported error information leaking internal paths. Impact: potential exposure of sensiti...

CVE-2011-3820

WSN Software 6.0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/prestart.php and certain other files...

WSN Guest 1.24 SQL Injection

www.eVuln.com advisory: "time" SQL Injection vulnerability in WSN Guest -----------Summary----------- http://evuln.com/vulns/175/summary.html eVuln ID: EV0175 Software: WSN Guest Vendor: n/a Version: 1.24 Critical Level: medium Type: SQL Injection Status: Unpatched. No reply from developers PoC:...

CVE-2011-1060

SQL injection vulnerability in the member function in classes/member.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the wsnuser cookie to index.php...

CVE-2011-1061

SQL injection vulnerability in memberlist.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the time parameter...

Sql injection

SQL injection vulnerability in memberlist.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the time parameter...

CVE-2011-1061

SQL injection vulnerability in memberlist.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the time parameter...

CVE-2011-1061

CVE-2011-1061 : Concrete vulnerability found in WSN Guest 1.24. The issue is a SQL injection in the file memberlist.php, exploitable via the time parameter, enabling remote attackers to execute arbitrary SQL commands. The connected documents confirm the affected product/version and describe the u...

CVE-2011-1060

CVE-2011-1060 affects WSN Guest 1.24, specifically the member.php class function where the wsnuser cookie to index.php enables SQL injection. This allows remote attackers to execute arbitrary SQL commands. CVSS2 v2.0 base score 7.5 (HIGH) with network access, low attack complexity, no authenticat...

CVE-2011-1060

SQL injection vulnerability in the member function in classes/member.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the wsnuser cookie to index.php...

www.eVuln.com : "time" SQL Injection vulnerability in WSN Guest

www.eVuln.com advisory: "time" SQL Injection vulnerability in WSN Guest -----------Summary----------- http://evuln.com/vulns/175/summary.html eVuln ID: EV0175 Software: WSN Guest Vendor: n/a Version: 1.24 Critical Level: medium Type: SQL Injection Status: Unpatched. No reply from developers PoC:...

www.eVuln.com : "wsnuser" Cookie SQL Injection vulnerability in WSN Guest

www.eVuln.com advisory: "wsnuser" Cookie SQL Injection vulnerability in WSN Guest -----------Summary----------- http://evuln.com/vulns/174/summary.html eVuln ID: EV0174 Software: WSN Guest Vendor: n/a Version: 1.24 Critical Level: medium Type: SQL Injection Status: Unpatched. No reply from...

WSN Guest 1.24 - wsnuser Cookie SQL Injection

WSN Guest 1.24 - wsnuser Cookie SQL Injection source: https://www.securityfocus.com/bid/46444/info WSN Guest is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...