Description
SQL injection vulnerability in memberlist.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the time parameter.
References
- 8102 third-party-advisory
- http://packetstormsecurity.org/files/view/98573/wsnguest124-sql.txt
- http://evuln.com/vulns/175/summary.html
- wsnguest-index-sql-injection(65550) vdb-entry
- 46465 vdb-entry
- 20110221 www.eVuln.com : "time" SQL Injection vulnerability in WSN Guest mailing-list