SQL Injection

Mingsoft MCMS are vulnerable to sql injection attacks. The vulnerability exists in verify function in PageAction.java because the validated function call is not properly handled allows an attacker to inject and execute arbitrary queries...