CVE-2008-5165: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in eTicket 1.5.7 allow remote attackers to execute arbitrary SQL commands via the pri parameter to 1 index.php, 2 open.php, 3 openraw.php, and 4 newticket.php...