CVE-2010-4006

CVE-2010-4006 concerns SQL injection in the WSN Links software. The vulnerability exists in search.php, where the parameters namecondition and namesearch can be used to inject SQL, enabling remote commands. Affected versions are < 6.0.1 and < 5.1.51 /

CVE-2008-6032

The CVE-2008-6032 vulnerability affects WSN Links Free 4.0.34P, where comments.php exposes a SQL injection via the id parameter. This allows remote attackers to manipulate the database and potentially execute arbitrary SQL commands. The available documents do not provide a mitigation or patch ver...

CVE-2008-3555

This CVE (CVE-2008-3555) is a directory traversal/local-file-inclusion flaw in index.php across multiple WSN products (WSN Forum 4.1.43 and earlier; Gallery 4.1.30 and earlier; WSNKB 4.1.36 and earlier; Links 4.1.44 and earlier; possibly Classifieds before 4.1.30). The underlying issue is a vulne...