CVE-2006-3348: Undefined Security Weakness

Multiple SQL injection vulnerabilities in HSPcomplete 3.2.2 and 3.3 Beta and earlier allow remote attackers to execute arbitrary SQL commands via the 1 type parameter in report.php and 2 level parameter in custombuttons.php...