CVE-2012-4743

The CVE-2012-4743 entry describes multiple SQL injection vulnerabilities in the Siche search module (Siche search module 0.5) for Zeroboard, exploitable via the parameters (ss, sm, align, category) in ssearch.php. The underlying issue is insecure handling of input in ssearch.php that allows remot...