Security Advisory
CVE-2006-5030
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in modules/messages/index.php in exV2 2.0.4.3 and earlier allows remote authenticated users to execute arbitrary SQL commands via the sort parameter.