SQL injection vulnerability in index.php in Papoo before 3.7.2 allows remote attackers to execute arbitrary SQL commands via the suchanzahl parameter.Referenceshttp://secunia.com/advisories/31520https://exchange.xforce.ibmcloud.com/vulnerabilities/44516http://www.papoo.de/cms-news-und-infos/security/patch1-10808.htmlhttp://holisticinfosec.org/content/view/80/45/http://www.securityfocus.com/bid/30752http://www.osvdb.org/47554