MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing.Referenceshttps://www.exploit-db.com/exploits/43076/