CVE-2010-4006

Public PoC / Exploit (2)

TrickestTrickest PoC index Exploit-DBWSN Links - SQL Injection

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) namecondition or (2) namesearch parameter.

Weaknesses (CWE)

CWE-89

Affected Products (132)

wsn · linksvulnerable

wsn · wsn_linksvulnerable

...and 82 more

References (12)

http://archives.neohapsis.com/archives/fulldisclosure/2010-10/0512.html

http://www.exploit-db.com/exploits/15607

http://www.securityfocus.com/archive/1/514585/100/0/threaded

http://www.securityfocus.com/bid/44593

Exploit

http://www.uncompiled.com/2010/10/wsn-links-sql-injection-vulnerability-cve-2010-4006/

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/62939

http://archives.neohapsis.com/archives/fulldisclosure/2010-10/0512.html

http://www.exploit-db.com/exploits/15607

http://www.securityfocus.com/archive/1/514585/100/0/threaded

http://www.securityfocus.com/bid/44593

Exploit

http://www.uncompiled.com/2010/10/wsn-links-sql-injection-vulnerability-cve-2010-4006/

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/62939