SQL injection vulnerability in Infinite Responder before 1.48 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party information.
https://exchange.xforce.ibmcloud.com/vulnerabilities/35452
http://www.securityfocus.com/bid/24931
http://sourceforge.net/project/shownotes.php?release_id=523684&group_id=199618