SQL Injection

net.mingsoft, ms-mcms is vulnerable to SQL Injection. The vulnerability exists because the library does not properly validate the query strings in the basic_title parameter , allowing an attacker to inject and execute malicious SQL queries.