SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/22386
http://www.vupen.com/english/advisories/2005/1829