CVE-2008-0099

Affected software: MyPHP Forum 3.0 and earlier. Vulnerability: SQL injection in search.php (searchtext) and unspecified other vectors. Root cause: improper handling of user-supplied input enabling arbitrary SQL execution. Impact: remote attackers can perform SQL commands with partial confidential...