Blind SQL Injection in filedownload v1.4 wordpress pluginReferenceshttp://www.vapidlabs.com/advisory.php?v=140http://www.securityfocus.com/bid/97106
