CVE-2008-3251: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the opp parameter to tampereunited/opponent.php; or the id parameter to 2 index.php, 3 player.php, 4 matchdetails.php, or 5 additionalpage.php in tampereunited/...