CVE-2007-3687

The vulnerability CVE-2007-3687 affects Inferno Technologies’ RPG Inferno (Inferno 2.4 and earlier). It is an SQL injection in inferno.php, in the vBulletin module, allowing remote authenticated attackers to execute arbitrary SQL commands via the id parameter in a ScanMember do action. Impact is ...