CVE-2008-3556: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute arbitrary SQL commands via the 1 showmember parameter in a members action and the 2 thread parameter in a board action. NOTE: vector 1 might be the same as CVE-2008-2522...

CVE-2008-2522: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in members.php in Battle.net Clan Script for PHP 1.5.3 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showmember parameter in a members action...