EUVD-2008-3936

Malware in sbrugna...

CVE-2008-3951: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewann.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the annid parameter...