Description
CoolForum 0.8.1 beta and earlier allows remote attackers to manipulate SQL commands via certain requests to (1) alert.php or (2) viewip.php, possibly due to a SQL injection vulnerability.
References
- 20050320 -==CoolForum Path Disclosure & Possible SQL Injection==- mailing-list
- 1013474 vdb-entry