CVE		CVE-2008-3867
Status		Candidate
Description		SQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 allows remote attackers to execute arbitrary SQL commands via the email_user_key parameter.
Phase		Assigned (29.08.2008)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3867
References		BID : 32014
		BUGTRAQ : 20081031 Secunia Research: Interact SQL Injection and Cross-Site Request Forgery
		CONFIRM : http://sourceforge.net/tracker/index.php?func=deta...
		MISC : http://secunia.com/secunia_research/2008-44/
		SECUNIA : 32359
		SREASON : 4537
		XF : interact-emailuser-sql-injection(46267)