CVE-2009-3208 Information

Description

Multiple SQL injection vulnerabilities in phpfreeBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to permalink.php and (2) year parameter to index.php.

Reference

http://packetstormsecurity.org/0908-exploits/phpfreebb-sql.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/52550