CVE-2011-5168

Banana Dance is affected by CVE-2011-5168 via the user.php file. The issue enables SQL injection through the id parameter, allowing arbitrary SQL execution. The known remediation is to upgrade Banana Dance to version B.1.5 or later; a temporary workaround is to restrict access to the user.php fil...