CVE-2010-4933: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in filemgmt/singlefile.php in Geeklog 1.3.8 allows remote attackers to execute arbitrary SQL commands via the lid parameter...