CVE-2013-3527

Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to 1 entry/signin or 2 entry/passwordrequest...

PT-2013-4457

Name of the Vulnerable Software and Affected Versions Vanilla Forums versions prior to 2.0.18.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the name parameter in the Form/Email array to either the "entry/signin" or "entry/passwordrequest"...

CVE-2013-3527: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to 1 entry/signin or 2 entry/passwordrequest...