CVE-2006-1766

Papoo is affected by SQL injection vulnerabilities in versions 2.1.5 and 3 beta1 and earlier. The flaws allow remote attackers to inject arbitrary SQL via (1) index.php parameters getlang and reporeid, (2) plugin.php and (c) forumthread.php parameter menuid, and (4) forumthread.php parameter msgi...