CVE-2007-4810: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to execute arbitrary SQL commands via 1 the geid parameter in a list.artists action to explore.php or 2 the id parameter in a show.tracks action to xml.php...