EUVD-2011-1557

Malware in sbrugna...

CVE-2011-1556: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase Aphpkb 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter...