Mail.ru: allods.mail.ru sql injection

SQL injection in allods.mail.ru due to insecure use of externally controlled GET parameter...