CVE-2009-2605: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in adminquery.php in Traidnt Up 2.0 allow remote attackers to execute arbitrary SQL commands via 1 trupuser and 2 truppassword cookies to uploadcp/index.php...