CVE-2008-3948: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/users/self-2.php in XRMS allows remote attackers to execute arbitrary SQL commands and modify name and email fields via unspecified vectors...