CVE-2009-3498: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in php/updatearticlehits.php in HBcms 1.7 allows remote attackers to execute arbitrary SQL commands via the articleid parameter...