Description
SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to execute arbitrary SQL commands via the cur_cat parameter.
References
- smf-manageboards-sql-injection(28716) vdb-entry
- 20060901 Sql injection in SMF [Admin section] mailing-list
- 21740 third-party-advisory
- 1506 third-party-advisory
- ADV-2006-3435 vdb-entry