PHPNuke friendphp Module Remote SQL Injection

An SQL injection vulnerability has been reported in PHPNuke Friend.php Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...