CVE-2008-2135: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL commands via the 1 contentname parameter to showdetails.php and the 2 article parameter to printer.php...