CVE-2008-5196: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in kroax.php in the Kroax thekroax 4.42 and earlier module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the category parameter...