CVE-2010-4006

CVE-2010-4006 concerns SQL injection in the WSN Links software. The vulnerability exists in search.php, where the parameters namecondition and namesearch can be used to inject SQL, enabling remote commands. Affected versions are < 6.0.1 and < 5.1.51 /