SQL Injection Vulnerability in KuaiFanCMS File /upload/kuaifan/module/xinxi/fasong.module.php

KuaiFanCMS V5.x is developed with PHP5+MYSQL as the technical base. kf is built with Smarty template engine. KuaiFanCMS file /upload/kuaifan/module/xinxi/fasong.module.php at the existence of SQL injection vulnerability, an attacker can use this vulnerability to obtain sensitive database...