SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to execute arbitrary SQL commands via the old_searches parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Punbb | Punbb | 1.2.7 (including) | 1.2.7 (including) |
| Punbb | Punbb | 1.2.8 (including) | 1.2.8 (including) |