Wsn Forum

wsn_forum

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Wsn Forum

wsn_forum

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-5421 1Wsn Forum 1Wsn Forum Apr 23, 2026 Oct 20, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 WSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified pathname in the pathtoconfig parameter that points to an avatar image that contains PHP code, which is then accessed from p...Show more WSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified pathname in the pathtoconfig parameter that points to an avatar image that contains PHP code, which is then accessed from prestart.php. NOTE: this issue has been labeled remote file inclusion, but that label only applies to the attack, not the underlying vulnerability.Show less
CVE-2005-3916 1Wsn Forum 1Wsn Forum Apr 16, 2026 Nov 30, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2006-5421

1Wsn Forum

Apr 23, 2026

Oct 20, 2006

N/A· v4

N/A· v3

7.5 HIGH· v2

WSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified pathname in the pathtoconfig parameter that points to an avatar image that contains PHP code, which is then accessed from prestart.php. NOTE: this issue has been labeled remote file inclusion, but that label only applies to the attack, not the underlying vulnerability.Show less

CVE-2005-3916

1Wsn Forum

Apr 16, 2026

Nov 30, 2005

N/A· v4

N/A· v3

7.5 HIGH· v2

SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action.