CVE-2013-5694: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arbitrary SQL commands via the serviceselection parameter...