Vegas Forum 1.0 Forumlib.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17079/info Vegas Forum is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could all...

Sql injection

SQL injection vulnerability in forumlib.php in JohnnyVegas Vegas Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter...

CVE-2006-1020

CVE-2006-1020 affects Vegas Forum 1.0 (Vegas Forum) via forumlib.php: the postid parameter is not properly sanitized, enabling remote SQL injection to execute arbitrary queries. Affected file/script: forumlib.php. Evidence from multiple sources (eVuln EV0090, NVD entry) confirms remote exploitati...