EUVD-2008-5900

Malware in sbrugna...

CVE-2008-5930: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/blogcomments.asp in The Net Guys ASPired2Blog allows remote attackers to execute arbitrary SQL commands via the BlogID parameter...