CVE-2005-2048

This is a vulnerability writeup describing SQL injection flaws in DUforum's admin/userEdit.asp page. It lacks executable exploit code but provides a proof-of-concept URL pattern for exploitation.

The provided text describes a SQL injection vulnerability in DUforum, where the 'iFor' parameter in 'post.asp' is not properly sanitized. It references a SecurityFocus BID but lacks actual exploit code or technical details.

The provided text describes a SQL injection vulnerability in DUforum, where the 'iMsg' parameter in 'messages.asp' is not properly sanitized. It includes an example URL demonstrating the vulnerability but lacks executable exploit code.

This is a vulnerability writeup describing SQL injection flaws in DUforum. It provides a high-level overview of the issue and a sample exploit URL but lacks executable PoC code.