Unscored CVE-2007-3705 EUVD-2007-3689GHSA-4x4q-cq8x-2hq4

SQL injection vulnerability in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via the FTVAR_SUBCAT (txForumID) para…

Published Jul 11, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via the FTVAR_SUBCAT (txForumID) parameter to forum/index.cfm and possibly other unspecified components, related to forum/include/error/forumerror.cfm.

References

2879 third-party-advisory
20070618 Fusetalk SQL injection submission. mailing-list
37140 vdb-entry