CVE-2010-2912: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL commands via the a parameter in a downloads action...