Security Advisory
CVE-2006-3239
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the UserID parameter.