CVE-2005-3682

CVE-2005-3682 describes multiple SQL injection vulnerabilities in Wizz Forum 1.20 . Attackers can remotely exploit: (1) AuthID in ForumAuthDetails.php, (2) TopicID in ForumTopicDetails.php, and (3) TopicID/ForumReply in ForumReply.php to execute arbitrary SQL commands. The description indicates t...