Cmsez(with easy)total Station system injection 0day-vulnerability warning-the black bar safety net

| allinurl:"owered by CMSEZ" comments.php inurlowered by CMSEZ Vulnerability code: mainfile.php ? //comments include "mainfile.php"; $art=new article; //Set $confirm='yes';//yes:need administrator authentication to the display,no:direct display $member=new member; $userinfo=$member-memberauth;...