CVE-2006-1978
SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_username COOKIE parameter.
Date published : 2006-04-21
http://www.securityfocus.com/bid/17568
http://www.securityfocus.com/archive/1/431156/100/0/threaded