CVE-2010-0954: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in searchresult.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the courseID parameter...