CVE-2015-7569: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in "yeager/y.php/tabUSERLIST" in Yeager CMS 1.2.1 allows local users to execute arbitrary SQL commands via the "pagedirorderby" parameter...