Sql injection

Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $POST array...