CVE-2008-4527: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in recept.php in the Recepies Recept module 1.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the katid parameter in a kategorier action. NOTE: some of these details are obtained from third party information...