CVE-2017-17627: Improper Neutralization of Special Elements used in an SQL Command

Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php reportvideos array parameter...