RSS   Vulnerabilities for 'Links'   RSS

2010-11-03
 
CVE-2010-4006

CWE-89
 

 
Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) namecondition or (2) namesearch parameter.

 
2009-02-03
 
CVE-2008-6032

CWE-89
 

 
SQL injection vulnerability in comments.php in WSN Links Free 4.0.34P allows remote attackers to execute arbitrary SQL commands via the id parameter.

 
2008-08-08
 
CVE-2008-3555

CWE-22
 

 
Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3) Knowledge Base (WSNKB) 4.1.36 and earlier, (4) Links 4.1.44 and earlier, and possibly (5) Classifieds before 4.1.30 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the TID parameter, as demonstrated by uploading a .jpg file containing PHP sequences.

 

 >>> Vendor: WSN 5 Products
Gallery
Links
Forum
Wsn links
Knowledge base


Copyright 2024, cxsecurity.com

 

Back to Top