CVE-2010-4006

Published Nov 3, 2010 CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Description
Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) namecondition or (2) namesearch parameter.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-3982 Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) namecondition or (2) namesearch parameter.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.01043}

epss

{'score': 0.00971}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 3:26 AM
Reserved
Oct 20, 2010, 12:00 AM
Status
Modified
Published
Nov 3, 2010, 8:00 PM
Modified
Jun 16, 2026, 11:23 PM