CVE-2008-4072: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in phsBlog 0.2 allow remote attackers to execute arbitrary SQL commands via 1 the sid parameter in a pickup action or 2 the sqlcid parameter, different vectors than CVE-2008-3588...