SQL injection vulnerability in members/mail.php in E-topbiz Online Dating 3 1.0 allows remote authenticated users to execute arbitrary SQL commands via the mail_id parameter in a veiw action.

More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3490)