Description
Multiple SQL injection vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) username parameters.
References
- 20060426 MySmartBB<---v 1.1.x SQL Injection/XSS mailing-list
- mysmartbb-misc-sql-injection(26088) vdb-entry
- 17707 vdb-entry
- 807 third-party-advisory