zencart/zc-v1-series — pull request #210 by bhoipkemier (2014-10-16 17:04:26+00:00)
Title: SQL injection vulnerability.

Filenames are not being escaped, and may contain apostrophes, thereby corrupting the queries.