CVE-2007-0812

SQL injection in pms.php of Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier; remote authenticated users can execute arbitrary SQL via pmid[0]. Affected: wBB Lite