Description
SQL injection vulnerability in forumlib.php in Johnny_Vegas Vegas Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter.
References
- 17079 vdb-entry
- 19219 third-party-advisory
- 574 third-party-advisory
- ADV-2006-0790 vdb-entry
- http://evuln.com/vulns/90/summary.html
- vegasforum-forumlib-sql-injection(25167) vdb-entry
- 20060313 [eVuln] Vegas Forum SQL Injection Vulnerability mailing-list