CVE-2007-6667

The CVE-2007-6667 entry describes an SQL injection in MyPHP Forum 3.0 and earlier, exploitable via the id parameter in faq.php. The vulnerability allows remote execution of arbitrary SQL commands, with the attack surface limited to the FAQ handling path; the note indicates the member.php vector i...