CVE-2012-2908: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 bbcodeexample, 2 buttonimage, or 3 bbcodetag parameter...