U-mail Mail Service system to the latest version 3 SQL injection vulnerability package-vulnerability warning-the black bar safety net

Injection point 1: \client\mail\module\views.php: code area if ACTION == "mail-compose" $draftmail = gss $GET'draft' ; $forwardmail = gss $GET'forward' ; $replymail = gss $GET'reply' ; $mailbox = gss $GET'mailbox' ; $writeagain = gss $GET'writeagain' ; $issendfile = gss $GET'sendfile' ; $isshare ...