CVE-2019-10653: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Hsycms V1.1. There is a SQL injection vulnerability via a /news/.html page...