CVE-2011-0443

CVE-2011-0443 affects tinyBB 1.2, where the vulnerable component is inc/tinybb-settings.php. The root cause is inadequate sanitization of user-supplied data in the profile action to index.php, allowing SQL commands to be injected when magic_quotes_gpc is disabled. The impact described across sour...