Description
SQL injection vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to execute arbitrary SQL commands via the az parameter.
References
- deforumlite-dcboard-sql-injection(26084) vdb-entry
- 24989 vdb-entry
- 17697 vdb-entry
- 792 third-party-advisory
- 20060425 DCForumLite V 3.0<--XSS/SQL Injection mailing-list