BK Forum versions less than or equal to 4.0 suffer from a remote SQL injection vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45778/BKForum-4.0.txt
Source: https://packetstormsecurity.com/files/45778/BKForum-4.0.txt.html