CVE-2005-4334

CVE-2005-4334 affects ZixForum 1.12, where an SQL injection flaw exists in the H_ID parameter used by zixforum/forum.asp and its references (Headforums.asp, Subject.asp). Exploitation would allow remote attackers to inject SQL commands. The available documents identify the vulnerable component (f...