CVE-2009-0831: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in members.php in the Members CV job module 1.0 for PHP-Fusion, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the sortby parameter...