CVE-2012-6520

CVE-2012-6520 affects Wikidforum 2.10. Multiple SQL injection flaws in the advanced search allow remote attackers to execute arbitrary SQL via the select_sort and opt_search_select parameters. CVSSv2 base 7.5 (HIGH) with network attack vector and no authentication. Note: exploitation status is no...

CVE-2012-6520

Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands via the 1 selectsort or 2 optsearchselect parameters. NOTE: this issue could not be reproduced by third parties...