Description
SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to execute arbitrary SQL commands via the member name.
References
- ttcms-profile-sql-injection(12273) vdb-entry
- 3278 third-party-advisory
- 7543 vdb-entry
- 20030509 ttcms and ttforum exploits mailing-list