CVE-2007-2259
SQL injection vulnerability in forum.php in EsForum 3.0 allows remote attackers to execute arbitrary SQL commands via the idsalon parameter.
Date published : 2007-04-25
http://www.securityfocus.com/bid/23605
http://www.securityfocus.com/archive/1/466663/100/0/threaded