high7.5
CVE-2011-1061
SQL injection vulnerability in memberlist.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the time parameter.
Impact
SQL injection vulnerability in memberlist.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the time parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webmastersite | Wsn Guest | Version 1.24 |
Weakness classification
References
- NVD record
- CVE.org record
- http://evuln.com/vulns/175/summary.html
- http://packetstormsecurity.org/files/view/98573/wsnguest124-sql.txt
- http://securityreason.com/securityalert/8102
- http://www.securityfocus.com/archive/1/516562/100/0/threaded
- http://www.securityfocus.com/bid/46465
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65550
- http://evuln.com/vulns/175/summary.html
- http://packetstormsecurity.org/files/view/98573/wsnguest124-sql.txt
- http://securityreason.com/securityalert/8102
- http://www.securityfocus.com/archive/1/516562/100/0/threaded
- http://www.securityfocus.com/bid/46465
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65550