CVE-2012-6520

Name of the Vulnerable Software and Affected Versions Wikidforum version 2.10

Description The issue concerns SQL injection vulnerabilities in the advanced search functionality. Remote attackers can execute arbitrary SQL commands by manipulating the select sort or opt search select parameters.

Recommendations For Wikidforum version 2.10, as a temporary workaround, consider restricting access to the advanced search functionality until a patch is available. Avoid using the select sort and opt search select parameters in the affected search endpoint until the issue is resolved.