CVE-2009-4351: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ADMIN/loginaction.php in WSCreator 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the Email aka username parameter...