SQL injection vulnerability in Mumbo Jumbo Media OP4 allows remote malicious users to execute arbitrary SQL commands via the id parameter to index.php.
mumbojumbo op4