CVE-2006-0123: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the 1 fid parameter in index.php and 2 pagid parameter in verpag.php, and possibly other vectors...