CVE-2011-1061

CVE-2011-1061 : Concrete vulnerability found in WSN Guest 1.24. The issue is a SQL injection in the file memberlist.php, exploitable via the time parameter, enabling remote attackers to execute arbitrary SQL commands. The connected documents confirm the affected product/version and describe the u...

CVE-2010-0672

Affected software: WSN Guest 1.02. The entry CVE-2010-0672 describes an SQL injection in index.php where the orderlinks parameter allows remote attackers to execute arbitrary SQL commands. The vulnerability is caused by unsafely handling user-supplied input in a web application component, enablin...

CVE-2009-0704

The CVE-2009-0704 entry concerns a SQL injection vulnerability in the WSN Guest 1.23 application, specifically in search.php. The underlying issue is that the search parameter in an advanced action is used in a way that allows an attacker to inject arbitrary SQL commands, enabling remote executio...

CVE-2011-1060

CVE-2011-1060 affects WSN Guest 1.24, specifically the member.php class function where the wsnuser cookie to index.php enables SQL injection. This allows remote attackers to execute arbitrary SQL commands. CVSS2 v2.0 base score 7.5 (HIGH) with network access, low attack complexity, no authenticat...