Description
SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter.
References
- 20051211 [PHP-CHECKER] 99 potential SQL injection vulnerabilities mailing-list
- 20441 vdb-entry
- 17410 third-party-advisory
- phpwebthings-forum-sql-injection(22972) vdb-entry
- 20051105 XSS & SQL injection in phpWebThing mailing-list
- http://glide.stanford.edu/yichen/research/sec.pdf
- 15277 vdb-entry