SQL Injection Vulnerability in Advertisement Modification of Dream CMS Backend

Dream CMS lmxcms is developed using php language and mysql database, and adopts the mainstream MVC design model. A SQL injection vulnerability exists in the background advertisement modification of Dream CMS. Attackers can use the vulnerability to obtain sensitive database information...