EUVD-2008-2412

Malware in sbrugna...

CVE-2008-2417: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in showQAnswer.asp in How2ASP.net Webboard 4.1 allows remote attackers to execute arbitrary SQL commands via the qNo parameter...