CVE-2008-7040

CVE-2008-7040 affects the WordPress Simple Forum plugin using the Yellow Swordfish Simple Forum module. The vulnerable component is ahah/sf-profile.php, exploitable via the u parameter to perform SQL injection and allow remote execution of arbitrary SQL commands. The issue is disclosed with cavea...