CVE-2011-5229: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in quickstart/profile/index.php in the Forum module in appRain CMF 0.1.5 allows remote attackers to execute arbitrary SQL commands via the PATHINFO...