WordPoints: Rank Creation function not validating user inputs.

SQL Injection Attack, command injection and arbitrary code execution Possible. By source code review, I found that rank creation parameters name, type, group for wordpointsaddrank in ranks.php are not sanitized or validated. It may allow an attacker to Inject arbitrary code during rank creation...