join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon (;) in a form variable.

Published Nov 22, 2001 · Updated Aug 8, 2024 · Assigned by mitre