CVE-2011-1061
published 2011-02-23CVE-2011-1061: SQL injection vulnerability in memberlist.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the time parameter.
PriorityP339high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.34%
67.8th percentile
SQL injection vulnerability in memberlist.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the time parameter.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| webmastersite | wsn_guest | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat4.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j76c-p2r2-qrqv: SQL injection vulnerability in memberlist
ghsa_unreviewed·2022-05-14
CVE-2011-1061 [HIGH] CWE-89 GHSA-j76c-p2r2-qrqv: SQL injection vulnerability in memberlist
SQL injection vulnerability in memberlist.php in WSN Guest 1.24 allows remote attackers to execute arbitrary SQL commands via the time parameter.
Red Hat
kernel: epoll: can leak file descriptors when returning -ELOOP
vendor_redhat·2012-03-27·CVSS 4.9
CVE-2012-3375 [MEDIUM] kernel: epoll: can leak file descriptors when returning -ELOOP
kernel: epoll: can leak file descriptors when returning -ELOOP
The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations, which allows local users to cause a denial of service (file-descriptor consumption and system crash) via a crafted application that attempts to create a circular epoll dependency. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1083.
Statement: This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 6, since updates fixing CVE-2011-1083 contained a corrected patch that did not introduce this regression.
This has been addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2012-1061.html, and R
No detection rules found.
No public exploits indexed.
http://evuln.com/vulns/175/summary.htmlhttp://packetstormsecurity.org/files/view/98573/wsnguest124-sql.txthttp://securityreason.com/securityalert/8102http://www.securityfocus.com/archive/1/516562/100/0/threadedhttp://www.securityfocus.com/bid/46465https://exchange.xforce.ibmcloud.com/vulnerabilities/65550http://evuln.com/vulns/175/summary.htmlhttp://packetstormsecurity.org/files/view/98573/wsnguest124-sql.txthttp://securityreason.com/securityalert/8102http://www.securityfocus.com/archive/1/516562/100/0/threadedhttp://www.securityfocus.com/bid/46465https://exchange.xforce.ibmcloud.com/vulnerabilities/65550
2011-02-23
Published