Valid tiny-erp <= 1.6 SQL injection vulnerability
Brought to you by:
jgeorgiou
http://seclists.org/fulldisclosure/2011/Nov/303
Have you fixed this issue yet?