CVE-2008-3554

Discuz! 6.0.1 is affected by a SQL injection in index.php via the searchid parameter in a search action. The vulnerability, caused by improper handling of the searchid input, allows remote attackers to execute arbitrary SQL commands. Public references indicate exploitable payloads exist (e.g., ex...