CVE-2006-6880: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in code/guestadd.php in PHP-Update 2.7 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 newmessage, 2 newname, 3 newwebsite, or 4 newemail parameter...