CVE-2007-2234

The CVE-2007-2234 vulnerability affects PunBB 1.2.14 and earlier, where include/common.php mishandles a disabled ini_get when checking register_globals. This can allow remote attackers to register global parameters, demonstrated by an SQL injection on the search_id parameter in search.php. The NV...