SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter.
https://www.exploit-db.com/exploits/3588
http://www.securityfocus.com/archive/1/463916/100/0/threaded