An SQL Injection vulnerability exists in the ID parameter in Online TV Database 2011.
online tv database project online tv database 2011