HDCMS v2.0 suffers from SQL injection vulnerability (CNVD-2018-19306)

HDCMS is a content management system software package developed in PHP+Mysql. It provides customers with powerful and complete functionality to accomplish rapid website development. HDCMS v2.0 version has a SQL injection vulnerability, which can be exploited by remote attackers to obtain sensitiv...