CVE-2010-2691: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitrary SQL commands via the 1 sbid parameter to productsdetails.php, 2 pid parameter to products/products.php, and 3 designid parameter to designview.php...