NuytsTech Security

CVE-2007-0226

by ·

SQL injection vulnerability in wbsearch.aspx in uniForum 4 and earlier allows remote attackers to execute arbitrary SQL commands via the "by User" field (aka the TXbyuser parameter).

Date published : 2007-01-12

http://www.securityfocus.com/bid/21966

http://www.securityfocus.com/archive/1/458060/100/0/threaded

Tags: