Debian Security Advisory 1092-1: Josh Berkus and Tom Lane discovered that MySQL 4.1, a popular SQL database, incorrectly parses strings escaped with mysql_real_escape() which could lead to SQL injection. This problem does only exist in versions 4.1 and 5.0.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/47160/dsa-1092-1.txt
Source: https://packetstormsecurity.com/files/47160/Debian-Linux-Security-Advisory-1092-1.html