SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the send parameter in a notes action.Referenceshttp://secunia.com/advisories/32788http://www.vupen.com/english/advisories/2008/3215http://www.securityfocus.com/bid/32362https://exchange.xforce.ibmcloud.com/vulnerabilities/46741https://www.exploit-db.com/exploits/7160
