CVE-2019-17552: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in idreamsoft iCMS v7.0.14. There is a spiderproject.admincp.php SQL injection vulnerability in the 'upload spider project scheme' feature via a two-dimensional payload...