CVE-2006-5221: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Cahier de texte 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 matiereID parameter in lire.php or the 2 classeID parameter in lireafaire.php...