EUVD-2007-4862

Malware in sbrugna...

CVE-2007-4881: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profile/myprofile.php in psi-labs.com social networking script psisns, probably 1.0, allows remote attackers to execute arbitrary SQL commands via the u parameter...