Product
The code-projects Online Reviewer System 1.0 contains a remote SQL injection vulnerability in the User Update Handler, with a public exploit currently available.