CVE-2009-2608: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to delete.php or 2 alphabet parameter to index.php. NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2565...