CVE-2006-7088: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 logonuser.php and 2 updateprofile.php...