SQL injection vulnerability in search.php in My Little Forum 1.5 and 1.6 beta allows remote attackers to execute arbitrary SQL commands via the phrase field.Referenceshttp://rgod.altervista.org/mylittle15_16b.htmlhttp://secunia.com/advisories/16913/http://www.securityfocus.com/bid/14908http://marc.info/?l=bugtraq&m=112741430006983&w=2