SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/22386
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-3072
http://www.vupen.com/english/advisories/2005/1829