CVE-2008-3070: Improper Neutralization of Special Elements used in an SQL Command

Unspecified vulnerability in inc/datahandler/user.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $user'language' variable, probably related to SQL injection...