EUVD-2013-6786

Malware in sbrugna...

CVE-2013-6985: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mworklog/logsearchday.jsp in Enorth Webpublisher CMS, possibly 5.0 and earlier, allows remote attackers to execute arbitrary SQL commands via the thisday parameter...