Security Advisory
CVE-2005-0676
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability.