Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) special.php, (2) article.php, or (3) cat2.php.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/72158http://packetstormsecurity.org/files/108426/CommonSense-CMS-Blind-SQL-Injection.html