CVE-2006-1271: Undefined Security Weakness

SQL injection vulnerability in index.php in OxyNews allows remote attackers to execute arbitrary SQL commands via the oxynewscommentid parameter...