CVE-2008-5739: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in evb/checkurl.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the url parameter...

Pligg evb/check_url.php url Parameter SQL Injection

The remote host is running Pligg, an open source content management system. The installed version of Pligg fails to sanitize user-supplied input to the 'url' parameter of the 'evb/checkurl.php' script before using it to construct database queries. Provided PHP's 'magicquotesgpc' setting is...