CVE-2012-6520

Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands via the (1) select_sort or (2) opt_search_select parameters. NOTE: this issue could not be reproduced by third parties.

Date published : 2013-01-23

http://www.securityfocus.com/bid/52425

http://archives.neohapsis.com/archives/bugtraq/2012-03/0046.html