XerCMS in***.php file suffers from SQL injection vulnerability

Ctrip CMS XerCMS is a content management system based on php+mysql, integrating membership, community, guestbook, news and model management. An SQL injection vulnerability exists in the XerCMS in.php file, which can be exploited by attackers to obtain sensitive information...