Daimon

**Name of the Vulnerable Software and Affected Versions** ASPTHAI.Net Webboard version 6.0 **Description** A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is related to the `id` parameter in the "bview.asp" file. **Recommendations** For ASPTHAI.Net Webboard version 6.0, avoid using the `id` parameter in the bview.asp file until a fix is available. Consider restricting access to the bview.asp file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** WSN Guest version 1.23 **Description** A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the `search` parameter in an advanced action within the search.php file. **Recommendations** For WSN Guest version 1.23, consider restricting access to the search.php file or the `search` parameter to minimize the risk of exploitation until a patch is available.