CVE-2008-0099 Information

Description

Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the searchtext parameter to search.php and unspecified other vectors.

Reference

http://www.securityfocus.com/bid/27118 https://www.exploit-db.com/exploits/4831