CVE-2013-3523: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in This HTML Is Simple THIS before 1.2.4 allows remote to execute arbitrary SQL commands via vectors related to op=page&id= in the URL...