EUVD-2007-1251

Malware in sbrugna...

CVE-2007-1254: Undefined Security Weakness

SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated users to execute arbitrary SQL commands and obtain privileges via the pskin parameter to index.php...