EUVD-2008-1555

Malware in sbrugna...

CVE-2008-1554: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in account/index.php in TopperMod 2.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via a non-alphanumeric first character the localita parameter, which bypasses a protection mechanism...