Vulnerabilities

TI-2020-13296 CVE-2020-18013 · GHSA-3p8j-jfr3-2cfp

SQL Injextion vulnerability exists in Whatsns 4.0 via the ip parameter in index.php?admin_banned/add.htm.

MEDIUM 45

SQL Injextion vulnerability exists in Whatsns 4.0 via the ip parameter in index.php?admin_banned/add.htm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01395 Published 2021-07-27 No fix listed CWE-89

TI-2019-08548 CVE-2019-11452 · GHSA-7q2h-jp4r-4ggg

LOW 34

whatsns 4.0 allows index.php?admin_category/remove.html cid[] SQL injection.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01252 Published 2019-04-22 No fix listed CWE-89

TI-2019-08547 CVE-2019-11451 · GHSA-mq2q-92f3-9h8h

LOW 34

whatsns 4.0 allows index.php?inform/add.html qid SQL injection.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01252 Published 2019-04-22 No fix listed CWE-89

TI-2019-08546 CVE-2019-11450 · GHSA-p7v5-gmch-c5rf

MEDIUM 45

whatsns 4.0 allows index.php?question/ajaxadd.html title SQL injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01452 Published 2019-04-22 No fix listed CWE-89