PT-2013-1984

Name of the Vulnerable Software and Affected Versions Wikidforum version 2.10 Description The issue concerns SQL injection vulnerabilities in the advanced search functionality. Remote attackers can execute arbitrary SQL commands by manipulating the select sort or opt search select parameters...