$ 0 0 An uninitialized variable within PunBB can allow for SQL injection attacks. Versions 1.2.5 and below are affected.