CVE-2005-3364: Undefined Security Weakness

Multiple SQL injection vulnerabilities in DboardGear allow remote attackers to execute arbitrary SQL commands via 1 the buddy parameter in buddy.php, 2 the u2uid parameter in u2u.php, and 3 an invalid theme file in the themes action to ctrtools.php...