CVE-2001-0848: Undefined Security Weakness

join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon ; in a form variable...

Fuse Talk vulnerability

e-zonemedia's Fuse Talk is vulnerable to malicious SQL. Improper form sanitization makes it possible for any user to manipulate data as she feels fit. On the sign up form join.cfm is possible to pass a well crafted form variable to the action template it's the same template subsequently join.cfm...