SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Yapbb | Yapbb | 1.1 (including) | 1.1 (including) |
| Yapbb | Yapbb | 1.2 (including) | 1.2 (including) |
| Yapbb | Yapbb | 1.2_beta2 (including) | 1.2_beta2 (including) |