Whatsns

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Whatsns records in CISA KEV

No Whatsns vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2020-13296 CVE-2020-18013 · GHSA-3p8j-jfr3-2cfp

MEDIUM 45

SQL Injextion vulnerability exists in Whatsns 4.0 via the ip parameter in index.php?admin_banned/add.htm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01395 Published 2021-07-27 No fix listed CWE-89

TI-2019-08546 CVE-2019-11450 · GHSA-p7v5-gmch-c5rf

MEDIUM 45

whatsns 4.0 allows index.php?question/ajaxadd.html title SQL injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01452 Published 2019-04-22 No fix listed CWE-89

TI-2019-08548 CVE-2019-11452 · GHSA-7q2h-jp4r-4ggg

LOW 34

whatsns 4.0 allows index.php?admin_category/remove.html cid[] SQL injection.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01252 Published 2019-04-22 No fix listed CWE-89

TI-2019-08547 CVE-2019-11451 · GHSA-mq2q-92f3-9h8h

LOW 34

whatsns 4.0 allows index.php?inform/add.html qid SQL injection.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01252 Published 2019-04-22 No fix listed CWE-89