CVE-2017-17928: Improper Neutralization of Special Elements used in an SQL Command

PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter...