CVE-2015-2242: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands via the 1 termid or 2 nyelvid parameter to index.php...