CVE-2008-6033

The CVE-2008-6033 entry describes a SQL injection in WSN Links 2.20 within comments.php, exploitable via the id parameter to allow remote attackers to execute arbitrary SQL commands. The affected component is the comments.php handling in WSN Links 2.20; root cause is unsanitized input leading to ...

CVE-2007-3981

CVE-2007-3981 : SQL injection in index.php of WSN Links Basic Edition allows remote attackers to execute arbitrary SQL commands via the catid parameter in a displaycat action. Connected documents confirm the vulnerability details; no remediation or exploit status provided in the sources.

CVE-2008-6031

The CVE-2008-6031 entry describes a SQL injection vulnerability in vote.php of WSN Links versions 2.22, 2.23, and note that 2.34 is also vulnerable. The vulnerability originates from handling the id parameter, allowing remote attackers to execute arbitrary SQL commands. Connected documents corrob...