CVE-2017-15987: Improper Neutralization of Special Elements used in an SQL Command

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter...