CVE-2008-6777

The vulnerability affects MyPHP Forum 3.0 and earlier (CVE-2008-6777). It includes multiple SQL injection paths: parameters (id) in confirm, (user) in newconfirm, and (reqpwd) in member.php, plus (quote) in post and (pid) in edit actions of post.php. Root cause is unsanitized user input allowing ...