Description
SQL injection vulnerability in view_user.php in WowBB 1.6, 1.61, and 1.62 allows remote attackers to execute arbitrary SQL commands via the sort_by parameter.
References
- wowbb-viewuser-sql-injection(20565) vdb-entry
- 13569 vdb-entry
- 16543 vdb-entry
- 12843 third-party-advisory
- 20050510 WowBB view_user.php SQL Injection Vulnerability mailing-list