Child Care Script 1.0 has SQL Injection via the /list city parameter.
kindergarten - elementary school listing script project kindergarten - elementary school listing script 1.0