CVE-2010-4006

CVE-2010-4006 describes multiple SQL injection vulnerabilities in WSN Links versions 5.0.x (before 5.0.81), 5.1.x (before 5.1.51), and 6.0.x (before 6.0.1). These flaws, found in the search.php script, allow unauthenticated remote attackers to execute arbitrary SQL commands by manipulating the 'namecondition' or 'namesearch' parameters. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.