RunCMS "forum" Parameter SQL Injection

06 November 2009
Bookmark and Share
RunCMS is a PHP-based content manager. The application is exposed to a SQL injection issue because it fails to sufficiently sanitize user-supplied data to the "forum" parameter of the "modules/forum/post.php" script before using it in an SQL query.

Ref: http://www.securityfocus.com/bid/36816

09.44.84 - CVE: Not Available
Platform: Web Application - SQL Injection