CVE-2017-15984: Improper Neutralization of Special Elements used in an SQL Command

Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...