CVE-2007-4368: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in /main in IBM Rational ClearQuest CQ Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter in a GenerateMainFrame command...