CVE-2008-6282: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in engine/users/userseditpub.inc in CMS Ortus 1.13 and earlier allows remote authenticated users to execute arbitrary SQL commands via the city parameter in a userseditpub action to index.php...