CVE-2008-1039: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands via the QID parameter...