CVE-2018-5986

SQL Injection exists in Easy Car Script 2014 via the sorder or srow parameter to sitesearch.php...