ADNForum.Index.PHP.FID.Parameter.SQL.Injection

Release Date Nov 11, 2009
Severity medium
Impact Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Description This indicates an attack attempt to exploit an SQL-injection vulnerability in ADNForum. The vulnerability is a result of the application's failure to properly sanitize user input before using it in an SQL query. As a result, a remote attacker can send a crafted query to execute SQL commands on a vulnerable server.
Affected Products ADNForum 1.0
Recommended Actions Upgrade your software to the latest versions.
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2006-0123
Reference/s http://www.securityfocus.com/bid/16157 (BugTraq)

Fortinet