CVE-2010-0980: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in player.php in Left 4 Dead L4D Stats 1.1 allows remote attackers to execute arbitrary SQL commands via the steamid parameter...