CVE-2004-2754

This CVE concerns a SQL injection in YaBB SE (v1.5.4, 1.5.3, and potentially older before 1.5.5) via the ID_MEMBER parameter to the recentTopics and welcome functions, allowing remote SQL commands. Affected software is YaBB SE; root cause is improper input handling in SSI.php. Impact per sources ...