CVE-2008-5590: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remote attackers to execute arbitrary SQL commands via the forumtopicid parameter...