CVE-2006-3304

The CVE-2006-3304 entry documents an SQL injection vulnerability in DeluxeBB cp.php (versions 1.07 and earlier). The underlying issue is that the xmsn parameter is unsafely handled, allowing remote attackers to craft inputs that lead to arbitrary SQL commands being executed against the database. ...