SQL injection vulnerability in forums.php in DeluxeBB 1.2 and previous versions allows remote malicious users to execute arbitrary SQL commands via the sort parameter.
deluxebb deluxebb