RadioCMS 2.2 - menager.php?playlist_id SQL Injection

RadioCMS 2.2 - menager.php?playlistid SQL Injection + + Title: RadioCMS 2.2 + Author: RoosterXEKA + Greetz to: Isis,luz3r,slider + Contact: forum.xeksec.com + -- Vuln Code -- ... if $GET'playlistid' $playlistidget = 'playlistid'; ... if $playlistid != "" $query = "SELECT FROM playlist WHERE...