SQL Injection Vulnerability in the order_turn parameter of the UWA 2.X Universal Site Builder System

UWA 2.X Universal Website AsThis is a universal website building system developed by AsThis based on PHP and MySQL. UWA 2.X Universal Website AsThis suffers from a SQL injection vulnerability. The lack of filtering of the 'orderturn' parameter allows an attacker to exploit the vulnerability to...