Description
SQL injection vulnerabilities in FUDforum before 2.2.0 allow remote attackers to perform unauthorized database operations via (1) report.php, (2) selmsg.php, and (3) showposts.php.
References
- 20020818 FUDforum file access and SQL Injection mailing-list
- fudforum-sql-injection(9912) vdb-entry
- 20020818 FUDforum file access and SQL Injection mailing-list
- 5500 vdb-entry