EUVD-2007-6170

Malware in sbrugna...

CVE-2007-6202: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier allows remote attackers to execute arbitrary SQL commands via the pagsub parameter to plug.php...