CVEvulnerability
CVE-2010-4006
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-11-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) namecondition or (2) namesearch parameter.
Affected configurations
• wsn links 5.1.2
• wsn links 5.1.3
• wsn links 5.1.17
• wsn links 5.1.18
• wsn links 5.1.19
• wsn links 5.1.20
• wsn links 5.1.21
• wsn links 5.1.22
• wsn links 5.1.23
• wsn links 5.1.24
• wsn links 5.1.25
• wsn links 5.1.26
• wsn links 5.1.27
• wsn links 5.1.28
• wsn links 5.1.29
• wsn links 5.1.30
• wsn links 5.1.31
• wsn links 5.1.32
• wsn links 5.1.33
• wsn links 5.1.34
• wsn wsn links 5.1.0
• wsn wsn links 5.1.1
• wsn wsn links 5.1.4
• wsn wsn links 5.1.5
• wsn wsn links 5.1.6
• wsn wsn links 5.1.7
• wsn wsn links 5.1.8
• wsn wsn links 5.1.9
• wsn wsn links 5.1.10
• wsn wsn links 5.1.11
• wsn wsn links 5.1.12
• wsn wsn links 5.1.13
• wsn wsn links 5.1.14
• wsn wsn links 5.1.15
• wsn wsn links 5.1.16
• wsn wsn links 5.1.35
• wsn wsn links 5.1.36
• wsn wsn links 5.1.37
• wsn wsn links 5.1.38
• wsn wsn links 5.1.39
• wsn wsn links 5.1.40
• wsn wsn links 5.1.41
• wsn wsn links 5.1.42
• wsn wsn links 5.1.43
• wsn wsn links 5.1.44
• wsn wsn links 5.1.45
• wsn wsn links 5.1.46
• wsn wsn links 5.1.47
• wsn wsn links 5.1.48
• wsn wsn links 5.1.49
• wsn wsn links 6.0.0
• wsnlinks wsn links 5.0.0
• wsnlinks wsn links 5.0.1
• wsnlinks wsn links 5.0.2
• wsnlinks wsn links 5.0.3
• wsnlinks wsn links 5.0.4
• wsnlinks wsn links 5.0.5
• wsnlinks wsn links 5.0.6
• wsnlinks wsn links 5.0.7
• wsnlinks wsn links 5.0.8
… and 72 more
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://archives.neohapsis.com/archives/fulldisclosure/2010-10/0512.html archives.neohapsis.com
- http://www.exploit-db.com/exploits/15607 www.exploit-db.com
- http://www.securityfocus.com/archive/1/514585/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/44593 Exploit
- http://www.uncompiled.com/2010/10/wsn-links-sql-injection-vulnerability-cve-2010-4006/ Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62939 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/fulldisclosure/2010-10/0512.html archives.neohapsis.com
- http://www.exploit-db.com/exploits/15607 www.exploit-db.com
- http://www.securityfocus.com/archive/1/514585/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/44593 Exploit
- http://www.uncompiled.com/2010/10/wsn-links-sql-injection-vulnerability-cve-2010-4006/ Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62939 exchange.xforce.ibmcloud.com