SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the email parameter.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')