Webmastersite

webmastersite

5 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-3820 1Webmastersite 1Wsn Software Apr 29, 2026 Sep 24, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 WSN Software 6.0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/prestart.php and certai...Show more WSN Software 6.0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/prestart.php and certain other files.Show less
CVE-2011-1061 1Webmastersite 1Wsn Guest Apr 29, 2026 Feb 23, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in memberlist.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the time parameter.
CVE-2011-1060 1Webmastersite 1Wsn Guest Apr 29, 2026 Feb 23, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the member function in classes/member.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the wsnuser cookie to index.php.
CVE-2010-0672 1Webmastersite 1Wsn Guest Apr 29, 2026 Feb 22, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands via the orderlinks parameter.
CVE-2009-0704 1Webmastersite 1Wsn Guest Apr 23, 2026 Feb 23, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in search.php in WSN Guest 1.23 allows remote attackers to execute arbitrary SQL commands via the search parameter in an advanced action.