CVE-2010-4796

Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute arbitrary SQL commands via the 1 provinceid parameter to search.php and the 2 e parameter to resumeview.php...