YesWiki SQL injection vulnerability

Versions of YesWiki prior to 4.7.0 contain an SQL injection vulnerability. This occurs because the from parameter in despam.php is escaped but placed in an INTERVAL without quotation marks. As a result, authenticated administrators may inject SQL via the from POST parameter, enabling blind readin...