SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
http://www.vupen.com/english/advisories/2006/0476
http://www.securityfocus.com/bid/16543
http://www.securityfocus.com/archive/1/424679/100/0/threaded