【中文导读】该 CVE 涉及SQL 注入(高危风险)。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/compose_msg_admin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.