Full title: Vanilla Forums 2-0-18-4 - SQL-Injection Vulnerability Category: web applications Platform: php SQL-Injection is possible, because$_POST arrays are not proper sanitized. You do not need to be authenticated. # 0day.today @ http://0day.today/