CVE-2008-6100: Berlios Discussion Forum 2k

Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to (a) RSS1.php and (b) RSS2.php in misc/; and the (2) SubID parameter to (c) misc/RSS5.php.

Affected products

• Berlios Discussion Forum 2k: version 3.3 only

Published 2009-02-10. Last modified 2026-06-16.