CVE-2006-3332

CVE-2006-3332 is a SQL injection vulnerability in Zorum Forum 3.5 affecting index.php. The flaw allows remote attackers to inject SQL commands via six parameters: offset, tid, fromid, sortby, fromfrommethod, and fromfromlist. The underlying issue is unsafe handling/concatenation of user-supplied ...