CVE-2010-1054: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ParsCMS allow remote attackers to execute arbitrary SQL commands via the RP parameter to 1 fadefault.asp and 2 endefault.asp...