CVE-2006-4734: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in tiki-g-adminprocesses.php in Tikiwiki 1.9.4 allow remote attackers to execute arbitrary SQL commands via the 1 pid and 2 where parameters...