webSPELL version 4.x suffers from a safe_query bypass vulnerability.
8e56487e139adc21e9e3ea4577df2d1345a25c1017ebc2e20b09ad29900f6a4d
webSPELL version 4.2.1 suffers from a remote SQL injection vulnerability in asearch.php.
0163ec03c6ae338856b27c1e38b3dd4ece2457d03c702cc8bbdfbf427709007c