CVE-2018-16822: Improper Neutralization of Special Elements used in an SQL Command

SeaCMS 6.64 allows SQL Injection via the upload/admin/adminvideo.php order parameter...