SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the UserID parameter.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Vbzoom |
Vbzoom |
1.11 |
1.11 |
Vbzoom |
Vbzoom |
1.01 |
1.01 |
Vbzoom |
Vbzoom |
1.00 |
1.00 |
References