CVE-2008-6777

The vulnerability affects MyPHP Forum 3.0 and earlier (CVE-2008-6777). It includes multiple SQL injection paths: parameters (id) in confirm, (user) in newconfirm, and (reqpwd) in member.php, plus (quote) in post and (pid) in edit actions of post.php. Root cause is unsanitized user input allowing ...

CVE-2007-6667

The CVE-2007-6667 entry describes an SQL injection in MyPHP Forum 3.0 and earlier, exploitable via the id parameter in faq.php. The vulnerability allows remote execution of arbitrary SQL commands, with the attack surface limited to the FAQ handling path; the note indicates the member.php vector i...