CVE-2018-19925: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. It has SQL injection via the member/memberorder.php type parameter, related to the Ostate parameter...