CVE-2006-7025: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/config.php in Bookmark4U 2.0 and 2.1 allows remote attackers to inject arbitrary SQL command via the sqlcmd parameter...