CVE-2008-2194

CVE-2008-2194 describes an SQL injection vulnerability in forums.php of DeluxeBB 1.2 and earlier. The issue is exploitable via the sort parameter and allows remote attackers to execute arbitrary SQL commands. The vulnerable component is the forums.php handling within DeluxeBB, and the root cause ...