CVE-2012-5227: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in administrer/tva.php in Peel SHOPPING 2.8 and 2.9 allows remote attackers to execute arbitrary SQL commands via the id parameter...