SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the UserID parameter.
CVSS Score
7.5
EPSS Score
0.005
Published
2006-06-27