← Database

CVE-2009-0882

HIGH CVSS: 7.5 Published: 2009-03-12 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in nForum 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to showtheme.php and the (2) user parameter to userinfo.php.

Affected Platforms

Roman Bogorodskiy Nforum

Weakness Type

CWE-89

References