CVE-2009-4889: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in books.php in the Book Panel bookpanel module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the bookid parameter...