SQL Injextion vulnerability exists in Whatsns 4.0 via the ip parameter in index.php?admin_banned/add.htm.
References
Link | Resource |
---|---|
https://github.com/YangSirrr/opendebug/blob/master/whatsns/Main.md | Exploit Third Party Advisory |
Configurations
Information
Published : 2021-07-30 07:15
Updated : 2021-08-03 12:12
NVD link : CVE-2020-18013
Mitre link : CVE-2020-18013
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
whatsns
- whatsns