Description
SQL injection vulnerability in discussion.class.php in xhawk.net discussion 2.0 beta2 allows remote attackers to execute arbitrary SQL commands via the view parameter.
References
- discussion-class-sql-injection(25237) vdb-entry
- 20060315 [eVuln] discussion - xhawk.net BBCode 'img' XSS & SQL Injection Vulnerabilities mailing-list
- http://evuln.com/vulns/92/summary.html
- 23971 vdb-entry
- 17121 vdb-entry