Software Vulnerability
Main
Science
Security
Software Alerts
Technology
Webmaster Tools
Thu, 11 Mar 10
bigforum
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-0948
SQL injection vulnerability in profil.php in Bigforum 4.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.