CVE-2008-6163: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL commands via the bannerid parameter...