CVE-2009-2328

CVE-2009-2328 affects KerviNet Forum versions 1.1 and earlier. The issue is in admin/edit_user.php which does not require administrative authentication, enabling remote attackers to delete arbitrary user accounts and perform SQL injection via the del_user_id parameter. The available connected doc...