CVE-2011-1055: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in api/icemedia.cfc in Lingxia I.C.E CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the session.userid parameter to media.cfm...