2007-10-23 01:00:00
mitre
PUBLISHED
SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to execute arbitrary SQL commands via the member name.