Security Advisory
CVE-2009-3185
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to execute arbitrary SQL commands via the fmid parameter in a view action.