Logoshows · Logoshows Bbs · CVE-2009-4871
**Name of the Vulnerable Software and Affected Versions**
Logoshows BBS version 2.0
**Description**
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `forumid` parameter in the "globepersonnel forum.asp" file.
**Recommendations**
For Logoshows BBS version 2.0, consider restricting access to the `globepersonnel forum.asp` file until a patch is available, and avoid using the `forumid` parameter in this file to minimize the risk of exploitation.