Pokeng

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `article id` parameter in the "article.php" file.