Description
SQL injection vulnerability in editpost.php in phpMyForum before 4.1.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party information.
References
- 25009 vdb-entry
- http://support.phpmyforum.de/topic.php?id=4669
- http://support.phpmyforum.de/topic.php?id=4665
- 26156 third-party-advisory
- ADV-2007-2609 vdb-entry
- 36276 vdb-entry