SQL injection vulnerability in BlueWhaleCRM allows remote attackers to execute arbitrary SQL commands via the Account ID field.Referenceshttp://www.securityfocus.com/bid/14697http://secunia.com/advisories/16615
