DeluxeBB 1.3 newpost. php page SQL injection vulnerability-vulnerability warning-the black bar safety net

DeluxeBB is a PHP-based Forum application. DeluxeBB of newpost. php page does not properly filter user submitted the SQL query parameters: //inserting thread $db-unbufferedquery"INSERT INTO ".$ prefix."threads VALUES NULL, ’$infofid’, ’".$ COOKIE’memberid’."’, ’$subject’, ’$posticon’, ’0’, ’0’,...