CVE

Id
11180  
CVE No.
CVE-2004-2754  
Status
Candidate  
Description
SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the ID_MEMBER parameter to the (1) recentTopics and (2) welcome functions.  
Phase
Assigned (20071115)  
Votes
None (candidate not yet proposed)  
Comments