CVE:CVE-2011-1060
CNNVD:CNNVD-201102-321
WSN Guest 1.24版本的classes/member.php中的成员函数中存在SQL注入漏洞。远程攻击者可以借助对index.php的wsnuser cookie执行任意SQL命令。
solution:Upgrade webmastersite wsn_guest to a higher version than 1.24,and avoid the version 1.24